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Abstract 


This  reporta^nalyzesWarket  trends  for  electronic  payment  methods.  It 
provides  insights  intojhow^ayment  processes  will  change  as  a  result  of  the 
Interne1^:^^^Sl^lNPUT's  Electronic -Gemmerce  Prograro^Representatives 
of  50  corporate  users,  lO"^ payment  processmg  services,  a  bankers  and  3 
financial  regulators  were  interviewed  to  capture  data  and  commentary  about 
the  potential  opportunities  available  in  this  market. 

Electronic  Payment^lgthodologies  identifies  the  payment  methodologies  — 
"that  are  most  likely  to  b^emawiHely  adopted.  It  also  discusses  trends, 
issue^nd  future  technology  directions. 

The  report  contains  124  pages  and  53  exhibits. 
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Introduction 


Purpose 


Payment  systems  are  being  revolutionized  with  the  explosion  of  Internet 
commerce  activity.  Paper  currency,  electronic  funds  transfer  (EFT), 
electronic  data  interchange  (EDI),  automatic  teller  machine  (ATM)  network^/^ 
and  credit  card  processing  are  well-established  payment  vehicles  that  form  ^ 
foundation  for  newer  developments. 

The  pros  and  cons  of  payment  systems  from  the  perspective  of  pay^,  payees  v 
and  financial  services  providers  are  analyzed.  The  report  describes  the  ^ 
advantages  and  disadvantages  of  newer  payment  systems  like  digital  cash, 
smart  cards^and  e--checks.  It  addresses  questions  such  as: 

/  •    Wh^Vechnologies  support  emerging  payment  systems? 

•  What  is  needed  for  successful  commercialization  of  payment  systems? 

•  How  can  investment  in  global  settlement  systems  be  leveraged  by 
newer  payment  systems? 

•  How  do  purchasing  departments  pay  using  credit  and  other  cards 
^  today? 


B 


Scope 


EEA6 


This  report  covers  well  as  consumer  tojbusiness, 

payment  methods.  It  reviews  traditional  and  emerging  payment  methods, 
including  smart  cards,  software-based  payrnent,  ^.-checks  and  credit  cards,  -it* — 
^is-maiftlj^.^.  rcocarch,  faowovot^rsome  bank^4^  Europe  were  interviewed. 
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The  vendors  covered  primarily  sell  products.'services  vendors  are  not  covered 
in  detail.  i 


Methodology 


The  reportis  based  on  in-depth  in^ei^^ws  with  10  payment  service 
providers, "aimancial  regulatorsfsoank^and  50  business  users  of  payment 
methods.  Telephone  and  e-mail  wfere  bol!h  used  to  conduct  the  surveys. 

In  addition,  secondary  research  from  vendor  literature,  oiUine  services  and 
input's  extensive  vendor  files  was  used.  ^ 


Report  Organization 


The  report  is  divided  into  six  chapters  and-tiiree  appendixes.  The  remaining 
chapters  of  this  report  include: 

Chapter  II,  Executive  Overview,  offers  an  overview  of  the  analysis  conducted 
as  part  of  the  study  and  summarizes  report  findings.  It  provides  a  briefing 
for  a  senior  executive  who  wants  to  understand  the  most  important  issues 
and  conclusions  without  reviewing  the  entire  study. 

Chapter  III,  Established  Payment  Methods,  examines  current  payment 
systems  and  analyzes  their  benefits,  pitfall^and  the  current  state^ofttlie^rt^ 

Chapter  IV,  Emerging  Payment  Methods  and  Vendors,  examines  emerging 
payment  systems,  both  for  the  Internet  and  for  storefront  payments.  It 
analyzes  their  processes,  potential  customers,  security  considerations, 
advantages,  disadvantage* ^nd  market  acceptance.  This  is  followed  by  an 
assessment  of  the  method. 

Chapter  V,  User  Awareness,  examines  how  users  are  reacting  to  new 
payment  methods.  J^(^i»ercep^iGH|f(^^nefits  and  barriers  to  acceptance  for 
new  payment  methods  analyzed.  Existmg  payment  system  acceptance  is 
also  analyzed. 

Chapter  VI,  Issues,  discusses  payment  and  legal  issues. 

Appendix  A  provides  a  glossary  of  key  Internet  terminology. 

Appendix  B  contains  the  vendor  names  and  addresses,  standards  committees^ 
and  associations. 


Appendix  C  contains  copies  of  the  questionnaires  used  in  conducting  the 
interviews.  
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Intended  Audience 

Electronic  J'ayment  Methodologies  is  designed  for: 

•  Storefront  merchants  and  Internet  merchants  y 

•  Payment  processors  and  financial  institutions 

•  Value-added  network  (VAN)  and  Internet  service  providers 

•  Systems  integrators,  hardware  manufacturer^nd  software  vendors 
selling  into  pa)Tiient  processing-related  markets. 

•  Regulators  and  government  organizations  wfe^eed  to  use  or  monitor 
payment  processes.,,^^-^ 

•  Internet  technology  vendors 
It  will  help  readers: 

•  Decide  on  which  payment  methodologies  to  invest  in. 

•  Analyze  competing  payment  processing  service  providers. 

•  Understand  trends  and  market  directions.  ^-^"'^ 


•    Develop  business  plans  and  marketing  presentations. 


Related  Reports 


9. 


INPUT  offers  Electronic  Commerce  and  Internet  subscription  programs  that 
track  <felat€^commerce  technologies  and  issues.  The  following  INPUT 
reports  are  of  related  interest: 


7  •  \  Electronic  Catalogs,  Web  Storefronts  and  Internet  Malls,  1995 
Electronic  Commerce  Over  the  Internet,  1996 
Internet  Sales  and  Marketing  Directions,  1995 
Using  the  Internet  for  Business  Operations,  1995 
Internet  Application  Case  Studies,  1995 

Internet  Security:  The  Impact  of  Firewalls  on  Client  /  Server  Applications,  1995 
Electronic  Commerce  Markets  and  Forecast,  1995-2000 
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II 


Executive  Overview 


Summary 


B 


Several  credit  card  and  micropayment  schemes  are  being  proposed  for  the 
Internet.  The  current  preferred  payment  method  for  Internet  transactions  is 
to  use  a  credit  card.  Visa,  Mastercard,  American  E^-^s/VeriFon^^    ^>  ^ 
Microsoft  and  others  are  working  on  SETislandarasior  cre§ftT3?a'^^ 
processing  over  the  Internet  and  these  are  Ukely  to  be  widely  accepted. 

Mondex,  initiated  by  National  Westminster  Bank  in  the  UK,  is  gaining 
global  acceptance  by  banks  and  is  a  strong  contender  for  a  micropayment 
cash  card  scheme,  both  for  storefront  and  network  transactions.  CyberCash, 
currently  with  a  proprietary  scheme,  will  follow  SET  standards  and  is  likely 
to  be  a  major  technology  supplier  and  payment  systems  vendor.  Smaller 
companies  like  DigiCash  may  have  to  find  niche  markets,  lest  they  be 
overtaken  by  Mondex  and  credit  card  vendors'  cash  card  schemes.  Visa  and 
Mastercard  will  not  allow  the  electronic  cash  systems  vendors  to  encroach  on 
their  markets  and  will  also  be  major  players. 

Digital  signature  schemes  are  starting  to  be  accepted.  Signatures  stored  in 
both  wallets  and  on  computers,  slowly  gathering  momentum,  will  become 
common  at  the  beginning  of  the  next  century.  There  will  be  tremendous 
opportunities  for  manufacturers  of  POS  (point-of-sale)  and  payment 
processing  systems  to  upgrade  merchants,  banks  and  payment  service 
companies.  Security  will  become  tighter  as  systems  evolve  and  excellent 
opportunities  in  supporting,  building  and  testing  security  systems  will 
develop. 


Key  Trends  and  Issues 


Exhibit  II- 1  lists  key  trends  and  issues  regarding  electronic  payments. 
Security  challenges  will  increase  as  fraud  and  hacker  activity  grow.  Digital 
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signatures  and  encryption  schemes  will  make  Internet  payment  schemes 
safer  than  traditional  checks  that  can  be  stolen,  counterfeited  or  signed  with 
forged  signatures.  Money  laundering  may  be  a  long  term  issue. 


Exhibit  11-1 


Trends,  Issues  and  Opportunities 


Security 

•  SET  acceptance  for  credit  card  Internet 
transactions 

•  Digital  signatures  will  be  gradually 
accepted  -  Certificate  Authorities  will  be 
a  new  type  of  organization 

•  Fraud  will  increase,  although  many 
Internet  schemes  are  safer  than  current 
payment  schemes 

•  Payment  processors  and  banks  can  offer 
Internet  services 

•  Services  and  products  based  around 
security 

•  Digital  signature  verification  and 
authentication  services 

•  Fraud  detection  systems 

Smart  Cards 

•  Cost  of  merchant  equipment 

•  Consumer  acceptance 

•  Competition  from  debit  cards, 
particularly  in  the  U.S. 

•  Card  introduction  in  a  new  area  -  how  to 
run  pilot  systems 

•  For  business  to  business  trade,  POs 
and  checks  are  still  preferred,  although 
Purchasing  Cards  are  increasingly  used 

•  POS  system  upgrades 

•  Global  vendor  systems  to  support 
worldwide  purchasing  -  purchase  here, 
deliver  there 

•  Internet  credit  card  processing  turnkey 
systems 

•  Smart  card  "on  the  street"  and  "on  the  net" 
systems 

J§mart  cards  are  likely  to  be  used  for  small 
amounts 

Robust 
Messaging 

•  More  intelligent  messages  that  include 
digital  signatures 

•  More  reliable  message  routing 

•  Multimedia  messaging 

•  Services  that  rely  on  signed  documents 

•  Directory  and  routing  services 

•  Higher  speed  private  networks 

•  New  businesses  that  sell  small  items  and 
accept  digital  cash  will  become  popular 

7^ 
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Exhibit  11-1 
(Continued) 


inities  (Cont.) 


Internet  Shopping 

•  Will  Internet  malls  succeed  and  who  will ; 
run  them  -  banks,  Internet  service  , 
providers,  telecommunications 
companies  or  financial  payment 
processors? 

•  What  payment  methods  will  be 
preferred-  a  global  digital  currency  could 
impact  national  economies 

•  Payment  reporting  and  data  aggregation 
will  differentiate  merchant  services 

•  Merchant  services  to  support  Internet 
shopping 

•  iFiieridciny  cxisiing  creuii  anu  oeuii  caru 
processing  systems  to  the  Internet 

•  Check  truncation  systems,  particularly 
scanning  devices  to  capture  check 
information 

Outsourcing  data 
management 

•  New  level  of  detail  possible  with  Internet 
payments 

•  Merchant  services  will  increasingly  be 
outsourced 

•  Customer  analysis  and  reporting  software 

•  Long  term  outsourcing  contracts 

•  New  applications  that  can  be  outsourced, 
for  example  transaction  payment  services 
using  products  like  Open  Market's  OM- 
Transact 

Source:  INPUT 


Which  Payment  Systems  Will  Win? 


1.  Outlook 

Credit  cards  clearly  have  an  early  lead  for  payment  over  the  Internet,  but  for 
smaller  transactions  or  anonymous  purchases  they  are  unsuitable. 

Businesses  continue  to  prefer  checks  to  any  other  form  of  payment,  although 
the  use  of  Purchasing  Cards  is  growing. 

The  Internet  will  fuel  further  growth  of  Purchasing  Cards.  Debit  cards  will 
increasingly  be  popular,  but  may  have  limited  use  overseas. 

Cash  cards  are  more  widely  used  in  Europe  and  Japan  than  in  the  U.S.. 
Vendors  like  Mondex  that  can  combine  Internet  payment  methods  with  those 
for  storefronts  are  at  an  advantage  over  those  that  support  either  the 
Internet  or  storefronts. 

Both  checks  and  cash  will  see  declining  use  over  the  next  10  years.  However, 
neither  is  in  danger  of  disappearing.  Singapore,  for  example,  aims  for  a 
cashless  society,  but  for  most  countries  this  will  be  impractical. 
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Exhibit  II-2  lists  the  traditional  payment  systems  reviewed  in  this  report 
and  summarizes  their  outlook. 


Exhibit  ll-2« 

Outlook  for  Traditional  Payment  Systems 

na<!h 

■     Will  uct^iiiic  III  uoC|  pdi Liv/Uidiiy  oiriaii  Ucriominauuri  coins 

•  Debit  and  credit  cards  will  be  the  main  alternatives 

•  If  cash  declines  significantly,  central  banks  will  be  at  risk  of  losing  interest  and 
therefore  will  want  to  be  involved  in  issuing  digital  currencies  long  term  -  this 

will  Pniintprflr*t  tPPhnnlnnw  nrn\/iHprQ*  tpnHonr'V/  tn  Hox/olon  ninhal  mirrann\ac 

Checks 

•  f^hppk  tninpfltinn  with  imsinp  QP^inninn  at  nriint  r\f  r*flntiiro  \ai\\\  ialea  aHv/antano  nf 
™       ^1  icv^rx  LI  ui  iv^ciiiui  1  Willi  Ullage  oL^cii  11  III      dL  LfvJiiii  \ji  OdLfluic  Will  latxo  ctUVailldyc  Ul 

existing  systems 

•  Paper  checks  will  always  be  used  for  some  transactions,  but  a  decline  in  their 
use  can  be  expected  towards  the  end  of  the  20*  century 

EFT  or  ACH  Transfers 

•    CheckFree,  the  Quicken  Financial  Network  and  other  services  that  enable 
consumers  and  businesses  to  pay  checks  electronically  will  compete  with 
Internet  payment  schemes 

ATM  Machines 

•  More  global  connections  via  Cirrus,  Plus,  Link  and  other  networks 

•  Mainly  used  by  consumers,  more  intelligent  ATMs  that  provide  other  services, 
like  smart  card  replenishment,  are  being  designed 

•  May  be  adapted  to  supply  other  goods  -  airline  tickets,  stamps 

Credit,  Debit  and  Cash 
Cards 

•  Mondex  is  a  promising  smart  card  scheme  for  both  storefront  and  Internet 
purchases 

•  Visa  Cash  and  similar  credit-card  company  schemes  will  be  likely  to  be 
successful 

Trade  Credit 

•    Will  continue,  because  practices  to  support  it  are  widely  implemented 

Source:  INPUT 

Exhibit  II-3  lists  the  major  emerging  payment  systems  reviewed  in  this 
report  and  summarizes  their  outlook. 
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Exhibit  11-3 


Outlook  for  Emerging  Payment  Systems 


Payment  System 


CyberCash  Cards  and  Coin 


Outlook 


•  CyberCash  will  move  to  SET  starijjards  as  they  evolve  and  is  likely  to  be  a 
major  payment  systems  vendo/i  ) 

•  Its  coin  scheme  is  subject  to  considerable  competition  and  its  future  is  less 
clear. 


DigiCash  ECash 


ECash  is  likely  to  be  a  niche  product  that  is  used  by  small  businesses  that 
cannot  obtain  credit  card  processing,  although  over  time  they  are  expected  to 
have  agreements  with  service  bureaus  and  banks  to  undertake  their  payment 
processing  , 

It  lacks  the  support  of  big  business  to  be  a  serious  threat  to  national  currencie 


FSTC  E-Check 


After  a  somewhat  shaky  start,  the  pilot  was  demonstrated  in  Sept.  96.  A  full 
pilot  trial  is  expected  by  early  1 997. 

Skepticism  surrounds  E-£heck  because  it  automates  the  paper  process  and 
seems  cumbersome  to  credit  card  processors  who  have  overcome  many  of  the 
problems  that  the  FSTC  is  trying  to  solve. 

This  is  likely  to  merge  with  other  schemes  for  digital  payment  as  they  are 
adopted  and  clear  winners  emerge.  


First  Virtual 


First  Virtual  has  an  innovative  system  that  enables  merchants  to  accept  credit 
card  payment  even  when  they  may  not  qualify  to  accept  credit  card  payments. 

This  system  supports  largely  small  businesses. 

First  Virtual  keeps  its  credit  card  numbers  off  the  net  for  security,  but  this 
makes  the  processing  more  labor  intensive  than  some  of  the  other  schemes. 

As  standards  emerge.  First  Virtual  may  need  to  become  a  payment  processor 
for  other  schemes  as  it  is  unlikely  that  its  processes  will  survive  in  the  face  of 
competition  from  Mondex,  Visa  and  others.  


Mondex  and  Visa  Cash 
Cards 


Mondex  is  a  promising  smart  card  scheme,  initiated  by  National  Westminster 
Bank  in  the  UK,  for  both  storefront  and  Internet  purchases.  Mondex  has  global 
partners  ancTa  strong  awareness  of  the  entire  payment  processing 
environment,  including  government  regulations,  that  a  smaller  vendor  cannot 
match. 


SET  Credit  Card 
Processing 


Widespread  vendor  support  and  popularity  of  credit  card  payment  for  Internet 
transactions  make  this  a  promising  approach.  For  all  except  the  smallest  items 
it  is  likely  to  be  the  primary  means  of  purchasing  goods  on  the  Internet.  


SSL  Netscape 


This  is  a  simple  standard  for  securing  a  vyeb  server,  not  a  complete  payment 
methodology.  ^ 

It  has  been  a  quick  fix  for  web  merchants,  but  is  likely  to  be  integrated  into 
more  sophisticated  systems  that  use  SET.  


Source:  INPUT 
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2.       Five  Year  Outlook 

,  /  'V 

oX       1996 ^  Year  of  Internet  Prototype  Commerce 

SSL-enabled  Commerce  Web  Servers  for  simple  credit  card  encryption 


•  CyberCash  and  SET  implementations  start  to  be  available 

•  Web  use  is  mainly  for  promotion,  with  some  order  taking 

&r      1997  -  Commerce  Pilots  Move  To  Significant  Systems 

•  Web  ordering  takes  off,  many  more  commerce-enabled  web  servers 

Digital  signatures  start  to  be  used  and  become  a  status  symbol 
Wide  availability  of  SET  systems,  software  and  services  !  \/M2b(^ 

Internet  wallet  standard  emerges  fb  Ix^-^-l.^'^ 

New  regulations  for  e-check  and  stored  value  cards  f^U^^  S^-^^f^^^tM 

E-check  and  check  truncation  FSTC  projects  continue 

Micropayment  cards  see  success  in  new  market  niches  '       „  ^, ,    ^  , 

Network  computers  for  the  Internet  provide  more  low  cost  access, 
widening  the  potential  market  for  goods  sold  over  the  Internet 

Explosion  of  Web  Catalogs,  especially  for  industrial  products 

Digital  certificates  foster  exchange  of  bills,  invoices,  POs  over  the 
Internet 

Internet  backbone  gets  upgraded  to  layered  network  offering  different 
classes  of  service  for  different  service  fees,  IPv6  increasing  number  of 
addressable  nodes 

•>    f^y^  ^ 

cT      1998/9-  Year  of  The  Smart  Card 

Micropayment  schemes  shake  out,  difficult  times  for  vendors  like 
CyberCash  and  DigiCash  if  they  fail  to  adopt  standards 

•  Visa,  Mastercard,  Europay  roll-out  microprocessor  card  "wallets" 

•  Signed  e-checks  complement  the  exchange  of  POs  over  the  Internet,  but 
acceptance  rate  is  slow,  given  competition  from  Visa  and  others 

•  Internet  bill  presentment  deployed 
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dS       2000 ^  -  Market  Maturity  Begins 

•  Banks  provide  Internet  business  services 

•  Business  accounting  software  incorporates  modules  for  paying  and  billing 
over  the  Internet 

•  Value  of  goods  and  services  traded  over  the  Internet  reaches  $165B  in 
2000  and  $600B  in  2001 


3.       Payment  Methodology  Positioning 

Exhibit  II-4  positions  payment  processing  methods  regarding  acceptance  and 
major  users.  Trade  credit  is  the  established  method  for  business-to-business 
transactions,  whether  via  purchase  order  (PO),  bartering  or  letter-of-credit. 
Credit  cards  are  accepted  in  most  countries  of  the  world,  although  the  U.S. 
has  more  extensive  use  of  them.  Until  recently  when  Purchasing  Cards  were 
issued  they  were  primarily  used  by  consumers  and  for  Travel  and 
Entertainment  (T&E)  in  business.  Increasingly  they  will  be  used  by 
businesses  for  purchasing  small  items  and  for  web  transactions.  The  SET 
Internet  payment  scheme  endorsed  by  Visa,  Mastercard,  Microsoft,  VeriFone 
and  others  will  be  globally  endorsed  as  it  rolls  out  in  products  and  services 
starting  this  year. 


Exhibit  li-4 


Payment  Processing  Method  Positioning 


Global  Acceptance 


National  Acceptance 


Niche  Acceptance 


Emerging 


Trade  Credit 


Credit  Cards 


Check 


SSL  Netscape 
For  Web  Servers 


EFT 


Cash 


t 


ATM  Machines 


Debit  Cards 


Cash  Cards  -  Mondex,  Visa 


SET  Internet  Credit  Card 


CyberCash  Coin 


FSTC  E-Check 


First  Virtual 


DigiCash  ECash 


Mainly  Business 


Both  Business  and  Consumer 


Mainly  Consmner 


Source:  INPUT 
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Conclusions 


•  Digital  currencies  are  still  in  their  infancy  and  no  clear  digital  cash 
winner  has  yet  emerged. 

•  Credit  cards  and  the  SET  standards  offer  promise  as  an  Internet 
payment  method  that  is  likely  to  succeed  rapidly. 

•  Merchants  are  sensitive  to  costs.  If  a  scheme  has  high  costs,  like  credit 
card  processing  then  it  must  offer  additional  benefits  like  superior 
reporting. 

•  Fast  processing  gives  a  methodology  a  competitive  advantage,  but  bear  in 
mind  that  merchants  may  want  some  time  to  pay  bills.  One  way  to 
address  this  is  to  waive  transaction  charges  for  certain  classes  of 
electronic  transactions  to  encourage  faster  payment,  just  as  POs  offer 
advantageous  terms  for  early  payment. 

•  Excellent  customer  relationships  will  increasingly  differentiate  payment 
processors  and  service  providers. 

•  Networking  and  Internet  technology  is  sometimes  hard  to  implement 
reliably.  Systems  must  be  set  up  that  make  it  easy  for  customers  to  link 
to  other  systems. 

•  Use  of  widely  accepted  standards,  such  as  SET,  are  essentials  for  any 
transaction  processor. 

•  Transaction  processing  can  be  differentiated  by  bundling  marketing  data 
with  an  aggregate  transaction  report.  Service  providers  need  to 
understand  how  they  can  expand  data  capture  and  data  aggregation 
processes  to  offer  added  value. 


•    Watch  emerging  smart  card  standards  carefully,  don't  go  it  alone,  ensure 
that  other  merchants  in  your  market  or  region  are  using  the  same 
technology. 


E 


Recommendations 


1. 


Recommendations  for  Merchants 


EEA6 


•    Invest  in  multi-purpose  equipment. 
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Consider  using  a  service  provider,  bank  or  payment  processor  to  handle 
Internet ^ej)  commerce  functions. 


2.  Recommendations  for  Non-storefiront  Businesses 

•  Evaluate  where  Purchasing  Cards  can  best  be  used. 

•  Consider  using  the  Internet  for  purchasing,  if  this  is  not  already  used. 

•  Offer  employees  guidelines  for  paying  for  goods  and  services  purchased 
from  web  servers. 

•  Consider  the  level  of  data  aggregation  and  marketing  information 
required  when  choosing  new  payment  schemes. 

3.  Recommendations  for  Banks 

•  Consider  offering  a  pilot  Smart  Card  project  in  an  entire  town  to 
establish  merchant  relationships. 

•  Offer  web  merchant  services  and  support,  either  directly  or  via  third 
parti^,  to  merchants  with  which  you  have  credit  card  or  banking 
relationships. 


f 


•  Explore  check  processing  and  consider  how  back-end  systems  can  be 
made  to  handle  Internet  payment  systems,  retrofitting  old  systems  may 
not  be  the  easiest  migration,  it  may  be  easier  to  consider  alternative 
processes. 

•  Team  up  with  recognized  Certificate  Authorities  and  promote  the  use  of 
digital  signatures  for  other  businesses,  such  as  loans. 

•  Offer  services  that  help  merchants  and  businesses  pay  consumers 
electronically. 

4.       Recommendations  for  Payment  Product  and  Services  Vendors 

•  Offer  Internet  services  to  existing  customers,  or  risk  losing  their  entire 
payment  processing  business  to  a  competitor  who  can  provide  Internet 
services. 

•  Consider  how  financial  check  paying  networks  will  interface  with 
Internet  payment  systems. 
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Established  Payment  Methods 


This  chapter  discusses  how  traditional  payment  systems,  i.e^^ash,  checks, 
electronic  funds  transfers,  automatic  teller  machines,  credit/debit/cash  card^ 
and  trade  credit  will  fare  as  newer  payment  methodologies  are  introduced. 


Current  Payment  Methods 


I — 


In  the  U.Sys^bout  20Wllion  payment  tr^r^ctions  annually  are 
billion  transactional!^ credit  carc^and^ibillion  transactionl^y// 
machine.  The  type  of  payment  method  used  varies  according  to 
transaction: 

Consumer^^usiness 

Businessrfemsumer 

Business/business 

•  Consumer^^nsumer 

Exhibit  III-l  shows  the  major  payment  methods  used  by  ^ 

\^   •  Retailers 
\ 

•  Large  consumer  billers  (such  as  utilities  and  telephone  companies) 
%^  Businesses  to  pay  other  businesses 


EEA6 
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Exhibit  III-1 


Current  Use      Payment  Methods 


Payment  Method 

Retailers 

i^arge  v^onsumer 
Biliers 

Consumer  to 
Business 

Business  to 
Business 

Cash 

20 

80 

Checks 

50 

10 

Credit  Card 

26 

5 

1 

Debit  Card 

4 

5 

PO,  Trade  Check, 
Credit 

90 

(may  incl.  check) 

EFT 

5 

Other 

4 

Source:  INPUT 

Businesses  like  check^  ;j(etailers  accept  a  wide  range  of  payments^  3-^^^ 
Consumers  preferiiaffto  pay  in  cash.  Checks  and  credit  cards  compete  for 
both  hard  goods  and  soft  goods  purchases  at  department  stores.  superstore§\. 
and  boutiques.  Credit  cards  dominate  lyfail  ^rdei/^^'elephone  prder  (MOTO) 
retailers.  ATM  cards  are  popular  in  supermarkets,  CMiyenience  stores  and 
gas  stations.  Credit  card  networks  issue  debit  cards  wK^look  like  a  credit 
card  to  a  merchantj^nd  look  like  an  ATM  card  to  a  consumer,  except  they 
don't  have  a  PIN.  Retailers  already  handle  30%  of  their  transactions  using 
either  debit  or  credit  car^  a  rfelatively  high  percentage  of  electronic 
processin^ompared  with  other  business  segments. 

Big  biliers  like  mortgage  companies,  utilities,  phone  companies,  insurance 
companie^and  credit  card  issuing  banks  use  lockbox  services  to  process 
payments  from  consumers,  usually  by  check  or  by  a  draft  issued  through  a 
service  like  CheckFree.  Increasingl;^direct  payments  are  made,  hut 
storefront  sites  to  accept  bills  are  still  common  for  consumers -tliMwant  to 
pay  in  person.  Returned  checks  are  forcing  some  of  these  biliers  to  accept 
credit  card  payment,  despite  2-5%  processing  fees.  Only  about  10%  of  these 
consumer-to-business  payments  are  electronic. 

Business-to-business  trade  is  still  firmly  tied  to  POs.  EDI  has  been  a  failure 
if  judged  by  the  number  of  businesses  that  accept  i^about  40,000  in  the  U.S. 
Slow  payments  and  check  are  the  norm  for  business-to-business  payments 
and  companies  like  to  use  the  float.  Purchasing  card  programs  are  rapidly 
being  accepted  and  their  use  is  likely  to  increase  in  this  segment  as  purchase 
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orders  are  replaced  by  electronic  transactions,  such  as  ordering  from  an 
industrial  catalog  over  the  Internet  and  paying  by  credit  card. 


B 


Cash 


1.  Background 

Cash  i^^idely  used  Aodi^^national  phenonienon,  with  each  country  having 
its  own  currency.  iHt^^lde^of  cash  fets-^keep  their  own  transaction 
recprds.  Software  products  like  Quicken  helpp^keep  track  of  transactions, 
but 'genera)|3(^usines^,^e^ffi^?H£  cash  by  setting  aside  a  petty  cash  box  for 
small  purcliases.  In  the  commercial  aren^ash  registers  and  POS  terminals 
capture  cash  toinsactions  for  merchants.  Some  banks  refuse  to  handle  small 
cash  depositsgunless  the  currency  is  packaged  in  rolls,  as  the  processing  cost 
is  too  high. 

2.  Benefits 

The  main  benefi^of  cash  are  that: 

•  It  is  universally  accepted. 

•  It  represents  a  real  store  of  value. 

•  Transactions  can  be  made  anonjmiously  in  a  retail  outlet. 

•  The  origin  of  stolen  cash  cannot  easily  be  traced. 

3.  Pitfalls 

Cash  has  many  problems  associated  with  it,  which  is  why  alternatives  like 
checks  and  credit  cards  are  so  popular: 

•  By  holding  cash  and  not  investing  it,  there  is  a  cost  to  the  holder  at  least 
equal  to  the  minimum  interest  rate. 

•  Cash  tends  to  be  heavy  and  not  easily  transportabl^^'^t  is  not  practical 
to  send  it  by  mai^ 

•  'jj^isk  of  theft,  errors  in  recorder  loss  is  high: 

-  jlippage  (thefts  or  errors)  may  be  as  high  as  4%. 

•  Supporting  cash  processing  is^e^^^For'a  merchant: 

-  Armored  vehicles  may  be -ttBedto  transport  it. 

A 
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-  Someone  or  a  machine  has  to  count  it. 

-  Small  change  is  inconvenient  and  expensive  to  handle. 

-  Point-of-sale  equipment  has  increased  in  cost  as  it  becomes  more 
automateq|^ 

•    Taxpayers  are  penalized  by  the  cost  of  minting,  processing^and  destrojang 
currencj^^  ^ 

4.  Stateiof/thetart 

Singapore  aims  to  replace  cash  transactions  in  the  next  ten  years.  Countries 
continually  replace  low^enomination  coins  wit^h  those  of  higher  value.  They 
replace  coins  with  paper  as  inflation  makes  ^fefie^metal  content  worth  more 
than  their  trading  value. 

It  is  unlikely  that  cash  will  disappear  in  retailing  and  in  consumer-to- 
consumer  transactions,  as  many  merchants  will  remain  relatively  ^  ^ 
unautomated.  However,  vendors  building  a  new  business  on  processing  cash 
would  be  advised  to  look  elsewhere  for  growth  opportunitiesyas  cash  use  is 
likely  to  decline.  ^ 


Checks 


A 


1.  Background 

Checks  represent  funds  available  in  the  payor's  bank  account.  They  are 
forms  that  promise  to  pay  at  a  later  date.  For  many  centuries  they  were  used 
y,|h£^^lite  and  only  in  the  1920s  did  they  start  to  be  widely  accepted.  After 
^  . .  . ,  II,  check  popularity  thrived  in  North  America,  but  for  paying  utility  bills 
and  regular  items /3^IR0  and  direct  payment  became  more  popular  in 
Europe.  The  latter  two  methods  havmg  the  aim  of  keeping  paper  out  of  the 


clearing  system. 


16 


2.  Benefits 

Checks  are  widely  used  because: 

I    Users  find  them  easy  to  fill  out 
I    They  can  be  mailed 
I    They  reduce  the  likelihood  of  theft 


ir 


•    They  provideprpof  of  payment,  particularly  in  the  U.S.  where  the  IRS 
and  others  4lkevCn^ks  a^  record  of  payments  made 
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I  •  They  frequently  can  be  processed  outside  the  country  of  origin,  albeit 

'  for  a  fee 

•  Virtually  anyone  can  cash  them,  given  enough  time  for  funds  to  be 

L  released 


3.  Pitfalls 

Checks  are: 


Expensive  to  process 

Subject  to  fraud^— "^heck  fraud  is  on  the  increase  and  counterfeit 
measures  offer  new  opportunities  for  systems  suppliers 

Noi^niform  in  size  —  whereas  consumer  checks  are  standardized, 
business  checks  come  in  many  size^ausing  problems  for  sorting 
machines  ^ 


Bank  statements  showing  check  payments  and  receipts  are  woefully 
inadequate  compared  with  credit  card  statements.  It  is  rare  for  a  bank  to 
list  the  payee  on  a  statement/fjusually  the  check  number  will  suffice  to  record 
a  transaction.  1 

Checks  persist  in  being  difficult  paper  items  to  process  because: 

/  •  Regulations  and  custom  make  signed  documents  a  necessity  for  some 
'  transactions 


4. 


Banking  laws  have  impeded  innovation 

A  large  investment  in  people  and  processes  has  already  been  made  in 
check  processin^it  is  hard  to  make  major  process  redesigns  when 
corporate  empires  are  at  stake 

n/'  ^  1/ 
Stateiof/thef-a^t 

About  29%  of  U.S.  payment  transactions  are  by  chec^«  About  60  billion 
checks  are  written  annually  in  the  U.S^n^according  to  industry  source^ 
about  20  million  are  written  by  businesses.  The  average  cost  to  process  a  ^ 
check  is  at  least  50  cents  (George  Kaufman,  U.S.  Financial  System,  Prentice- 
Hall  1991). 

A  tremendous  industry  has  grown  up  around  check  processing,  with  federal 
regulations  in  the  United  States  governing  the  time  a  bank  has  to  process  a 
check.  The  Federal  Reserve  Bank  clears  about  40%  of  the  U.S.'s  checks  and 
charters  planes,  helicopters,  truck^nd  couriers  to  meet  its  nightly 
deadlines.  Sorting,  filin^nd  returning  checks  has  led  to  tremendous 


EEA6 


) 

)  1997  by  INPUT.  Reproduction  Prohibited 


17 


ELECTRONIC  PAYMENT  METHODOLOGIES 


INPUT 


opportunities  for  systems  vendors,  primarily  IBM,  Unisygt^and  NCR.  Niche 
vendors,  like  BancTec,  have  also  emerged.  ' 

Increasingl^anks  truncate  checks/ that  i^hey  do  not  send  them  back  to 
the  customer.  This  means  that  they  do  no^  have  to  handle  paper  throughout 
the  system  and  can  rely  on  microfilm  or  images  if  the  payer  needs  a  check 
copy  at  a  later  date.  r 


There  are  two  aspects  to  printing  checks  with  a  laser  printei^W)ne  is  printing 
the  check  with  magnetic  toner  to  fill  in  the  account  informatioi^the  other  is 
to  fill  in  the  payee,  amoun^and  dat^^^hich  should  notuse  magnetic  toner. 
Magnetic  toner  may  confuse  check  sorting  system^aser-printed  account 
numbers  at  the  bottom  of  the  check  (in  the  MICR line)  may  wear  off  before 
they  have  completed  their  passage  through  the  check  processing  system. 
However,  encoding  the  amount  on  the  bottom  line  of  a  check  can  save  a 
proofing  step  in  a  bank's  check  processing  operations,  where  operators  with 
character  recognition  machines  automatically  enter  or  type  in  the  amount  so 
that  it  can  be  read  by  a  machine  in  subsequent  sorting  operations.  Checks  ^^^.^ 
may  be  sorted  over  10  times,  but  the  average  is  somewhere  between^ and 
sorts  per  check.  ^ 

CheckFree,  a  service  that  enables  customers  to  pay  bills  electronically  from 
software  such  as  Intuit's  Quicken,  ai^not  really  checl^free.  In  some  case^ 
CheckFree  makes  an  electronic  pajmient,  ariore  commonly  it  prints  its  own 
paper  unsigned  drafts  and  passes  them  through  the  system,  exposing 
CheckFr^  to  morejisk  than  that  normally  assumed  by  banks.  Howevejyit 
does  Me^he  useij^aving  to  put  stamps  on  envelopes  and  handle  paper. ' 

input's  research  found  that  many  businesses,  particularly  large  one^pay  ^^^^ 
their  bills  and  receive  payments  automatically,  creating  their  own  virtual 
checking  system.  They  may  send  their  accounts  payable  file  to  a  bank, 
where  the  bank  takes  over  bill  paying.  For  incoming  checks,  many 
businesses  use  bank  or  payment  processing  services.  The  bank  can  then 
transmit  data  on  magnetic  tape  or  over  a  network  that  can  be  put  into  the 
Accounts  Hieceivable  system. 


EFT  or  ACH  Transfers 


1.       Background  ^ 

Electronic  funds  transfer  (EFT)  payip^tsare  transfers  of  datate^ove 
funds  from  one  place  to  another,  4ft^;^^^^aper.  Financial  EDI  (FEDI)  is 
the  final  process  in  ordering  goods  using  EDI  that  pays  the  bill  electronically. 
Automated^  Clearing^Houses^(ACHs)  form  an  electronic  funds  transfer 
network  that  conforms  to^ACH^  (National  ACH  Association)  standards. 
The  ACH  is  used  for  direct  deposit  into  a  bank  account  of  wages,  salarie^and 
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social  securit;^.  It  is  used  to  pay  mortgages,  utility  bills,  membership  fees, 
subscription^nd  for  many  other  transactioria4ncluding  FEDI. 

In  1995,  the  ACH  Network  proc^sed  nearly  3.5  billion  itemsj^owmg  at 
about  14%  annually  for  the  last"^^ars,  with  a  total  value  ofmore  than  $11 
trillion.  Currentl^^n  estimated  9()tper€ei1tt'of  all  ACH  transactions  are 
consumer  transactions.  In  1992,  AcK  transactions  were  4%  of  the  number  of 
checks  and  12%  of  the  value  in  the  U.S.  (Source:  J.  K.  Dietrich,  Financial^ 
Services  and  Financial  Institutions). 


2.  Benefits 

By  value yas  many  as  half  of  all  corporate  payments  are  already  made  by 
some  electronic  process,  such  as  EFT,  FEDJs^o^urchasing  (^ard.  Much  of  / 
this  is  payroll  processingwhiBhibr  most  col'porations^is  the  biggest  cost.  Y-" 
This  study  found  that  on^  hhont  5%  of  transactions  are  made  electronically.  ' 

The  main  benefits  of  EFT  are: 

I   •    Paperless  processing  inside  the  system,  saving  processing  time  and 
costs 

Widely  accepted  standards  for  certain  applications^  payroll 
processing,  benefits  transfer,  medical  claims  processing,'^egular  bill 
payments  ^ 

ACH  networks  work  directly  with  bank  accounts,  thereby  enabling 
^connections  to  many  different  types  of  customers,  consumers,Targe  business^ 
^*'^^^^mall  business^  a 

A-  A 

3.  Pitfalls 

•  Interfaces  directly  into  ACH  networks  are  not  readily  available  for  small 
businesses,  unless  they  use  a  financial  processing  service.  It  is  therefore 
more  suitable  for  repeated  transactions  than  for  one-off  payments. 

•  It  is  up  to  the  user  to  keep  detailed  reports  on  transactionsj^^ 


iioffthefat 


4.  State-ioffthe/ao-t 

EFT  is  a  less  costly  proces^f  than  transferring  a  paper  checMjetween  banksj 
aoreyen  a  check  image^v^CH  networks  are  increasingly  being  used  as  the 
back-end  tolrnany  differenTpayment  systems.  For  example,  FSTC'sj^check 
demonstration  used  ACH  processing  at  the  final  step.  ^  ~  4r 

<y'' 

Services  like  CheckFree  will  increasingly  use  ACH  network^  instead  of 
creating  paper  drafts  ^as  digital  certificates  become  more  widely  accepted 
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ACH  networks  are  in  a  strong  position  to  process  digital  cash  ae^they 
interface  directly  to  bank  accounts.  ^ 




Consumer  ATM  Machines  Transfers  y^' 


1.  Background 

Automatic  feller  Ji^achines  (ATMs);as  their  name  suggests ^re  designed  to 
reduce  the  costs  associated  with  having  bank  tellers.  About  70%  of  ATM 
visits  are  for  cash  withdrawal.^onsumer^us^i^^  cardan  average  10.6 
times  per  month  and  85%  of  checking  account  users  have  use  ATM  machines 
at  least  monthlyr'^-^  ^  '  ^ 

 '^o.v^  W  iW  Z"?^ 

Consumers  use  ATM  cards  at  POS  systems  less  than  a  times  a  month.  They 
prefer  to  use  ATM  cards^for  essential  items,  like  food,  so  as  to  avoid  going 
into  debt.  ir^StW  Yty^/x  qmJ^  c^nJS 

AS^jmachines  are  interlinked  by  different  networks  such  as  Cirrus,  Plu&>^ 
and  Link  (^I^-  They  are  moving  from  their  traditional  banking  locations'' 
into  supermarkets,  business  complexe^and  entertainment  complexes. 


Benefits 

ATR^-fflaehi»es^are  now  widely  located,  with  international  connections 
available  in  many  countries. 

Merchants  typically  pay  lower  transaction  fees  on  debit  cards  than  on 
credit  cards , 


3. 


Pitfalls 


Some  of  the  disadvantages  of  ATMs: 


•  Fees  for  some  transactions  discourage  us&<  j 

•  Ipiimits  on  amount 'that  can  be  obtained  from  a  machine  J5) 


.  56onsumer  iind  a  machin^^oney  cannot  be 

houserTAcA^v^JL^T" 


4.  Stateiof/ther^t 

ATmrnachines  nave  the  potential  to  dispense  not  just  cash,  but  information, 
stamps,  ticket^nd  coupons.  In  Swindon  (U.K.),  for  Mondex's  cashcard 
trial,  the  ATM^machinot^were  used  to  fill  up  reloadable  cards, 
machines  may  also  dispense  cash  cards.  A. 
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1.       Background  l/' 


Credit,  Debi^nd  Cash  Cards 


n 


Credit  cards  have  traditionally  been  used  for  travel  and  entertainment  in  , 
business.  Diner's  Club  had  the  first  general  travel  and  entertainment  card,  ■^'^^ 
with  a  high  membership  fee  and  a  6%  fee  for  merchants.^nkAmericard  was  ^ 
the  biggest  card  issuer  in  the  1960s  and  evolved  into  an  industry  association  (f)'^ 
to  mutually  accept  cards  from  other  banks  that  became  Visa.] Visa  now  C-{jJ^^^^'^ 
operates  one  of  the  largest  ATM  networks  and  is  a  major  network  services  ^ 
provider.  According  to  the  Federal  Reserve,  80%  of  households  have  credit 
cards  and  66%  use  them  regularly.  Credit  card  processM-s,  like  First  Data 
"^n^^aBancp,  handle  70%  of  credit  card  processing,  ^^i^  banks  ^eidk^the 
inrsO' 


remaining  30%.  b  /  A 

VeriFone  (Redwood  City,  CA)  has  shipped  over  j.-ttiiJlion  transaetiofi  ^  -|^ie^ 
verification  terminals  in  100  countries  and  had  1985  revenues  of  $38'4M.'  It  ^"^^ 
recently  announced  ayenture  with  Microsoft  to  t^e  its  credit  card      ^  ^(^ICZ-- 
_yalidation  software^PQS,  thus  advancing  Internet  commerce.  VeriFone  is     -  '  >  \  ^ 
the  leader  m  equipment  for  capturing  credit  card  information.  m  \  ^ 

Credit  card  limits  were  often  too  small  for  major  corporate  purchases,  the 
transaction  fees  inappropriate^and  handling  multiple  users  of  a  cardwas_  \ 
hard.  Visa  and  Master^rd  recognize  the  limitations  of  credit  cards  v^efr^ 
■  eomea-t^^usiness  use.  Following  American  Express's  successful  program  for 
corporate  credit  cards,  they  havl^^umped  into  this  market.  Purchasing  ^ards 
are  designed  for  corporations,  ■^^^^dinj^  to  Vis^o^l996r^  -f 
American  Expres^and  Discover  cardfs^ai^lG|^3';p('^'l'goo''4^  in 
the  U.S.;  and  $J.^8^'if6?i?twide.  Purchasing  ^ard  holders  can  obtain 
monthly  statements  electronically  on  disk  or  tape.  Reports  can  contain  three 
levels  of  information,  depending  on  the  data  captured  by  the  POS  system: 


[ 


Level  1  — date,  merchant,  location,  total 

Level  2  —  as  above  plus  item  detail  and  sales  tax 

Level  3  —  as  above  plus  user  specific  codes  for  special  projects,  item 
groups._^_^ 

INPUT  believes  that  approximately  half  of  the  consumers  with  credit  cards 
would  like  this  type  of  reporting.  With  software  such  as  Quicken,  consumers 
are  increasingly  analyzing  their  expenditures  more  closely. 

Debit  cards  have  been  issued  by  Visa  and  Mastergard  member  banks  to 
appeal  to  the  merchant  who  wants  lower  fees  ^ifid^the  cdnsumer  who  does  not 
want  to  exceed  his  credit  limit.  Debit  card  payments  are  settled  at  the  end  of 
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the  day,  when  cash  is  taken  from  the  owner's  bank  to  pay  off  transactions. 
With  a  secured  credit  car^he  consumer  maintains  a  cash  balance  to  cover 
the  payments  in  another  account,  /^eful  for  consumers  with  poor  credit 
ratings  who  mayWtherwise/noBget  a  card.  Neither  debit  cards/nor  secured 
credit  cards  are  perionaTidentification  number  (PIN)  protected.  ^ 

Visa  Cash  cards  were  introduced  at  the  1996  AUa;|^ta  Olympic  ^mes  to  pay 
for  small  cash  items.  They  store  local  currency,' for  exampl9j4n"^he  U.S.  $10 
amounts.  Cards  may  be  for  one^ytime  use  or  tney  may  be  reloadable  at  an" 
ATM.  Visa  reports  that  in  1994,  consumers  worldwide-spent  approximately 
$8.1  trillion  in  cash  purchases.  Twenty-two  percent  of  that  amount,  or  $1.8 
trillion,  represents'^rchases  of  $10  or  less,  hence  the  attraction  of  cards 
that  can  handle  small  amounts  without  the  need  for  post-payment 
processing.  Consumers  are  attracted  to  cash  cards  for  their  convenience,' 
merchants  are  attracted  because  they  do  not  have  the  transaction  processing 
validation  and  post-payment  processin^associafeSwith  credit  cards. 

2.  Benefits 

Consumers  see  the  benefits  of  credit  cards  as: 
Less  cumbersome  than  checks.  ^ 

Providing  detailed  statements  listing  place,  tim^^and  amount  of  each 
purchase-''^---^  ^ 

Delaying  payment,  improving  cash  flow,  at  no  cost  if  the  bill  is  paid  on 

time.-'Z.^^  ^t. 

A  credit  line,  if  needed^--*^^ 

Limiting  losses  to  a  $50  maximum  if  a  lost  or  stolen  card  is  reported 
within  48  hours.^y'-'^^ 

  •    Allowing  disputed  or  erroneous  card  charges  to  be  left  unpaid  if 

identified  within  30  days 

Merchants  view  credit  cards  as  a  way  to  expand  their  market  and  assure^he 
pay|r  has  funds.  By  verifying  the  card  transaction,  merchants  arl'lewiyi  the 
inconvenience  of  chasing  bad  debts.  ^ 

Issuers  see  the  benefits  of  credit  cards  as: 

J      •    Providing  extensive  databases,  which  in  the  U.S.  may  be  used  for 
targeted  marketing 

Generating  lucrative  interest  payments,  higher  than  normally  offered 
by  a  bank  loan 


22 


®  1997  by  INPUT.  Reproduction  Prohibited. 


EEA6 


ELECTRONIC  PAYMENT  METHODOLOGIES 


INPUT 


3.  Pitfalls 

Even  as  recently  as  1995,  merchants  selling  on  the  Internet  could  not  qualify 
for  the  most  expensive  l(lail  (^rder^elephone^der  (MOTO)  fee  scale.  This 
was  the  impetus  behind  First  Virtual  obtaining  credit  card  merchant 
accounts  on  behalf  of  resellers.  Thc^edit  card  companies\now^ave7defined 
SET  standards  to  support  credit  card^rocessing  over  the  Internet.  ^ 

Users  are  concerned  that  credit  card  issuers  have  access  to  intimate 
purchase  details,  particularly  in  Europ^j-^here  in  some  countries  it  is  illegal 
to  use  credit  card  purchase  information  for  marketing  , 

4.  Stateloflthelart 

Purchasing  cards  are  typically  used  for  MRO  (maintenance,  repaiivand  office) 
services  and  products.  The  added  value  is  that  the  card  processor  can 
produce  timely  and  accurate  reporting  to  the  corporate  card  holder. 

Credit  card  transactions  now  account  for  15%  of  consumer  purchases.  Over 
50%  of  users  do  not  use  their  credit  lines  and  pay  their  card  balances  on 
time. 


Trade  Credit 


1.  Background 

Trade  credit  used  to  be  common  before  the  advent  of  credit  cards  in  the 
1960s,  with  lay-^way  plans  and  hire  purchase  agreements.  Department 
stores,  gasoline  companiesvand  grocery  stores  issued  their  own  cards.  All  but 
the  largest  merchants^„tAKh£UQOod  to  oapturetiata-eB-tbeif  eustemers.  have 
seen  their  own  cards  fall  into  disuse.  In  some  areas,  trade  credit  is  still  used, 
not  only  by  retailers,  but  also  by  doctors,  dentisti^N^nd  tradespeople. 

Business-to-business  commerce  still  relies  on  trade  credit.  For  example, 
"2^0%et  30  days"  gives  a  discount  of  2%  if  the  invoice  is  paid  in  10  days, 
otherwise  it  must  be  paid  in  30  days.  Purchase  orders  and  invoices  are  still 
the  norm  in  business  transactions,  extending  credit  until  the  bill  is  due. 

2.  Benefits 

Slow  paymente  are  a  way  companies  can  improve  their  balance  sheets 
temporaril^vj^ny  new  mechanism  that  .affects  cash  flow  adversely  may  meet 
with  resistance  ^s  businesses  , . ' 

/►^  \^   

Service  providers  generally  support  users  well  with  appropriate  software, 
systems  support  ^and  interfaces  to  other  payment  systems  .  ; 
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IV 


Emerging  Payment  Methods  and 
Vendors 


This  *6^e«considers  a  few  of  the  leading  contenders  for  new  payment 
methods.  The  advantages  and  disadvantages  of  each  method  are  described  \ 
-futd-ai^followed  by  an  analysis  of  the^  likelihood  of'l^rfeeT^ccepfance. 


Why  Are  New  Payment  Methods  Needed? 


More  than  50  new  payment  methods  are  being  proposed  for  electronic 
payment.  Some  are  academic  pilots,  others  commercial  implementations. 
The  perceived  benefits  are:  v, , 

•  To  make  transactions  move  faste^  for  example  ^^mart  cards  make 
supermarket  queues  move  faster.^^  )  ^  , 

•  i/yreait  cards  have  high  processing  fees  if  the  card  is  not  shown  or  the 

^  'transaction  value  is  smallThenee  alternatim^6ty^neiit-jaechaiiiaiB&-ttre-~>^ 
-needed  for  the  Intcrnot^^V 

•  To  gather  more  information  about  customers 

•  To  aggregate  data  for  subsequent  analysis^ 

1.  { I.  ^Data  Capture 

Given  the  success  with  which  major  credit  card  issuers  like  AT&T  and 
Citibank  have  been  abl^  to  analyze  their  customers'  bujdng  habits^  there  is 
tremendous  interest  -eft-tftevendors  of  payment  methods  ^tl^apturi*^ 
marketing  information. 


a  payment^  niethod^Qpturesj  yaluable  information  about  a  purchaser^ 
may  be  used  for: 
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^  •    Allocation  of  marketing  resources, 

•  Changing  bu5dng  behavior.^^^^ 

•  Forecasting  market  changes,/'^^ 

2.       Data  Aggregation 

Companies  like  Nielsen  and  Oracle,  with  its  Express  software,  analyze 
aggregate  data  so  that  customer  groups,  product  line^and  market  segments 
can  be  analyzed  from  payment  systems.  ^ 

B  

Cybercash^Cards  and  Coins 

1.  Process 

CyberCash  (Reston,  VA)  was  founded  in  1994  by  VeriFone  founder  Bill 
Melton  and  InterOp  trade  show  founder  Dan  Lynch.  In  many  ways  its 
processes  mimic  those  used  for  credit  cards. 

A'' 

In  1995  CyberCash  issued  the  CyberCash  Wallet,'that  initially  supports 
credit  card  transactions.  RSA  768-bit  encryption,  exportable  with  up  to 
1024-bit  keys  by  special  license  that  CyberCash  obtained  from  the  U.S. 
government,  is  used  to  encrypt  key  exchanges.  The  data  sent  from  the  wallet 
is  encrypted  using  56-bit  DES  encryption. 


Credit  Card  Processing  J^or  Internet  Purchases 


e  main  steps  in  the  payment  transaction  process  kth^ using  CyberCash 
technology  are: 

l^^^uyer  shops  by  browsing  -^h  servers  and  choosing  goods.  Client 
^  sends  message  to  server  listing  goods  it  wants  to  purchase.  Server 
sends  message  summarizing  transaction  to  the  buyer.  Buyer  clicks  on 
"Pay"  buttoi^Ji^hich  launches  a  Q:^erCashj_Check]F^^ 
or  AOL  wallet  and  choose^from^^-js^^      credit  cardj  ^i^'^ 

2.  Client  clicks  OK  to  forward  the  order  and  encrypted  payment 
information  to  the  server.  >  ^  / 

3.  Merchant  responsible  for  servers-separates  order  and  forwards 
payment  information  to  CyberCash  server  using  digital  signature  and 
private  key  encryption.  The' merchant  never  sees  the  credit  card 
information.  ^ 

4.  CyberCash  server  takes  the  credit  card  information  behind  its  firewall 
and  off  the  Internet.  It  unwraps  the  data  using  crypto  box  hardware 
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(as  used  by  banks  between  ATM  networks),  reformats  the  transactioi^ 
and  forwards  it  to  the  merchant's  bank  over  dedicated  hnes.  ) 

5.  TKe'merchant's  bank  verifies  the  transaction  with  the  credit  card 
company  for  approval  or  denial.  The  resulting  code  is  sent  to 
CyberCash. 

6.  Based  on  the  code,  CyberCash  passes  the  code  to  the  merchant  who 
then  passes  it  to  the  consumer. 

CyberCash  claims  the  entire  validation  process  takes  about  15-20  seconds, 
similar  to  getting  credit  card  validation  in  a  store. 

A  diagram  illustrating  this  process,  plus  additional  explanatioi;^s  available 
on  the  Web  at  http://www.cybercash.com/cybercash/info/sixsteps.html. 

0  '  ,/  Ki'4{uA 

W      CyberCash  Coin  Processing  |/^  ]  -^^n^.  ^/ 

CyberCash  is_^2^iectedtoJiaveintm  micropayment  electronic  cc 

based  payment  scheme  for  purchases  as  low  as  25  cents  by  the  end  of  1.  i  Jji 
ji^^nsume^will  be  able  to  fill  their  CyberCash  walle^with  electronic  coins 
from  their  checking  accountit  "f^'pxj 

To  fill  the  wallel^he  consumer  asks  CyberCash  to  get  an  amount,  say  $100. 
The  next  day  this  is  sent  into  the  wallet paving  been  cleared  via  ACH 

The  coin  is  data  and  not  a  store  of  value.  CyberCash  will  track  each 
transaction,  as  it  did  not  see  the  market  demand  for  privacy.  <^ 

In  addition,  the  wallet  keeps  a  log  of  transactions  on  the  user's  local 
computer.  CyberCash  offers  data  capture  and  aggregationlboth/^the 
buyer's  computer  and  its  own.  ^ —  y 

If  the  wallet  is  lost  or  damaged  on  the  buyer's  computer,  CyberCash  will 
have  a  transaction  record  that  can  be  used  to  restore  it.  CyberCash  is, 
potentiall^or  electronic  coin^n  the  position  that  American  Express  is  in 
for  Travelers'  Checks.)that  is,  that  they  can  replaced  worldwide. 

/A 

This  scheme  is  not  private  like  Chaumian  ECash  described  elsewhere  in  this  ^ 
report.  J 

2.       Typical  Merchant  ^ 

CyberCash  supports  a  number  of  diverse  industries.  CyberCash  has 
attracted  highTquality  firms  like  Novell,  Oracl^nd  Farallon  in  the  software 
industry.  J 
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It  has  agreements  with  trade  associations,  food  companies,  sports  clothes 
vendors.  ^ 

J.  D.  Power  and  Associates,  a  consumer  market  research  company,  and 
Virtual  Vineyards,  wine  merchants,  support  CyberCash  wallets. 

By  June  1996,  1,0Q4  merchants  had  signed  with  CyberCash  for  credit  card 
processing,'l2tCt]ve  ones  that  accept  wallets,  up  from  315  (with  74  live) 
March  31,  ^96/"^ 

Merchants  who  wish  to  support  CyberCash  must  first  sign  with  a  bank  or 
credit  card  processor  as  a  Credit  Card  Merchant  and  be  assigned  Merchant 
and  Terminal  ID  numbers. 

The  bank  will  supply  these  to  CyberCash  on  request.  The  merchants  install 
the  CashRegister  Secure  Merchant  Payment  System  (SMPS)  modules  that 
can  be  downloaded  from  the  CyberCash  web  site. 

3.  Advantages 

CyberCash  wallet  technology  is  gaining  acceptance  from  companies  like 
CheckFree  and  AOL. 

The  wallet  provides  a  convenient  place  to  keep  track  of  digital  signatures, 
credit  cards,  gjchecl^^ndj^C^ish. 

By  storing  personal  details  in  a  browser  or  wallet  the  consumer  will  not 
repeatedly  be  asked  for  name,  address^'  credit  card  info  laT  each  web  site 
visited.  This  should  make  Internet  shopping  more  attractive.  ^ 

Exportable  long  keys,  means Jglobally  standard  software  can  be  developed  for 


wallets.  _ 

^  — ^ 

^onnects  to  over  80%  of  banks  in  the  U.S. 

^'^oTera^L^^pro^ssing  times  of  20  seconds  for  the  buye^ 

i\|^erchant  does  not  see^yer's  credit  card  number,  thus  increasing  security. 

The  pajmient  processor  can  work  with  CyberCash's  servers  with  minimal 
investment  because  it  follows  credit  card  processing  standards. 

4.  Disadvantages 

Merchants  ^le^d-^  register  with  a  bank  or  credit  card  processor,  which  for 
small  merchants  may  be  a  disadvantage  \ 
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,  Merchants  -fteedpyberCash  software  "to-feeinstalled  J 

^^eiuferansaction  fee  payable  to  CyberCash  by  payment  processors  (^*y 

5.  Security  / 

CyberCash  offers  enhancements  over  SSL  security. 

It  solves  the  problems  of  false  charges  by  merchants  and  denial  of  charges  by 
consumers  (noi^epudiation). 

It  authenticates  digital  signatures,  protecting  both  buyer  and  seller. 

It  offers  banks  protection  against  security  flaws  at  merchants  who  may  have 
a  hacker  attack  or  dishonest  staff  that  steal  credit  card  numbers.  The 
merchant  never  sees  the  numbers  and  does  not  maintain  a  credit  card  file. 

The  SET  standard  offers  comparable  security. 

6.  Market  Acceptance 

CyberCash's  initial  credit  card  service  was  introduced  in  April  1995. 

Electronic  coin  services  will  be  available  late  1996  and  the  e-check  services 
are  expected  in  1997.  i^- 

y 

CyberCash  went  public  in  February  1996,  and  revenues  for  the  first  half  of 
1996  were  %2>^fP^'-^  ~  ' 

Transaction  processors  that  have  approved  CyberCash's  gateway  for  their 
banks  and  merchants  include:  \ 

Global  Payment  Systems  (MAPP/NDC)  •  rr.,^. 


•  Visa  (Vital)  "^^^^ 

•  American  Express 

•  Wells  Fargo  Bank 

•  CheckFree 

•  First  Data  Corporation  (Envoy,  CEi 

•  NOVA 

Wells  Fargo,  both  a  bank  and  a  processor,  has  been  signing  up  CyberCash 
Internet  merchants  since  the  beginning  of  1996. 


S,  NaBANCO,  FDR)  /i/i. 
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Most^ban^  rely  on  noiyJ)ank  service  companies  to  process  credit  cards, 
bankapntrol  70%  of  the  transaction  processing  mark9.t(  led  by  First 


SET  standards  will  mean  that  CyberCash  can  support  any  compatible 
merchant  software. 

CyberCash  supports  leading  UNIX  and  Windows  NT  operating  systems, 
its  development  partners  include: 


Digital  Equipment 

FTP  Software 

InterCon 

Netcom 

Open  Market 

Quarterdeck 

Sun  Microsystems 


Assess  ^^evi-l''' 


CyberCash  has  made  its  wallet  available  not  only  to  service  providers,  but 
also  to  banks  for  private  labeling.  It  is  likely  to  be  bundled  with  browsers. 

— ,jn  1996,  CyberCash  expects  to  add  Internet  checks..  The  coin  and  check 

schemes  will  expan3~CyberCash's  support  for  lower/end  merchants,  smaller 
transaction  amount^nd  users 4*1^00  not  qualify  for  credit  cards. 

7.       INPUT  Assessment 

CyberCash  has  an  experienced  management  team  witl^road  rea^Sc  I 
contacts  and  alliances.  The  company  is  a  pioneer  that  can  switch  its  product 
line  easily  to  accommodate  new  standards  and  software.  Its  processes  are 
proverbs  they  resemble  those  for  traditional  credit  card  processing. 

^VaiAAJS-^Vi/ CyberCash  is  an  emerging  player  and  with  its  back-end  processing  software  / 
\foT  merchants^has  considerable  opportunities  for  growth. 

I  Physieall^i^e  origins^  Cy^^erCasH  credUj  card  acc^tance^stenri^^imi^r  to 
/  SET  iA  that  it  bl^ds4he  nLM-chanito  thfeJbuyer's  actual  credit  card  number. 

\  CyberCash  has  been  involved  with  SET  design  and  is  modifying  its  products 
and  processes  to  support  SET. 
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CyberCash  supports  Internet  credit  card  transactions. 


VeriFone's  vGate  will  enable  merchants  to  bypass  CyberCash  and  connect  to 
payment  processors  directly. 

CyberCash  has  established  solid  brand  name  identity  with  web  software  and 
system  vendors.  .^i^ 

Sun,  Digital  and  SCO  embed  CyberCash's  payment  modules  into  their  web 
solutions. 

VeriFone  may  be  stronger  than  CyberCash  in  the  Windows  NT  market, 
because  of  a  development  agreement  with  Microsoft. 


n  the  UNIX  market,  CyberCash  has  the  lead. 


CyberCash's  lack  of  "on  the  street"  solutions,  where  VeriFone  is  strongest, 
may  prove  to  be  its  greatest  weakness. 

CyberCash's  plan  to  derive  revenues  from  payment  processors  on  a  per^  ^ 
transaction  basis  may  be  lucrative 'sh6rfc1term."^,Loiig  term  it  remains  to  be 
seen  whether  competition  will  enable  it  to  continue  to  charge  for  its  secure 
gateways.  i  / 

ate  1 996.  and  earlv  1 997  the  CvhprCasVi  flnin  T\ 


INPUT  believes  that  in  late  1996,  and  early  1997,the  CyberCash  Coin 
scheme  will  be  gradually  adopted.  If  it  proves  "sa^'^then  it  will  spread.  / 

Merchants  still  think  "credit  card"  when  considering  how  to  be  paid  over  t 
Internel^^^nc^^CyberCash  has  a  major  education  and  promotion  effort  to 
evangelize'the  use  of  its  coins. 

The  main  competitor  to  CyberCash  Coin  is  smart  cards,  where  some  banks 
believe  the  physical  ownership  of  a  card  by  a  buyer  makes  the  system  more 
reliable  and  secure. 

c/ 

Much  depends  on  the  payment  technology  used  and-4«-the  success  of  network 
computers. 

If  these  Internet  appliances  adopt  smart  card  technology,  then  CyberCash 
Coin  is  less  likely  to  succeed  long  term.  I^^owever,  users  find  Smart  Cards 
cumbersome  and  prefer  digital  solutions  to  be  stored  in  their  computer, 
CyberCash      be  the  long:4;erm  micropayment  leader. 

A  payment  scheme  that  works  both  on  and  off  the  net  will  be  the  lon^\^erm 
leader. 

Microsoft  intends  to  put  a  digital  wallet  in  its  Internet  Explorer  browser 
before  the  end  of  1996  and  by  1997  it  will  be  embedded  in  Windows. 
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The  wallet  is  intended  to  secure  a  user's  personal  information,  certificates, 
password^nd  even  numbers  like  social  security  numbers. 

This  should  help  standardize  what  otherwise  would  be  a  plethora  of  wallets, 
some  of  which  can  be  downloaded  from  DigiCash,  VeriFone,  CyberCashTV- 
On^nd  others'  ^et  lites.  ^  L-^ 


c  

DigiCash^ECasfT 


1.  Process 

DigiCash  was  forme^y  cryptographer  David  Chaun(in  199^,  head  of  the 
University  of  Amsterdam  cryptography  department.  Research  funding  has 
been  obtained  from  the  Dutch  government  and  the  European  Community. 

DigiCash's  Chaumian  ECash  system  evolved  from  stored  value  cards  for 
paying  highway  toll  fees.  It  has  been  trialed  since  1994. 

CyberBucks,  pretend  money,  was  issued  to  users  who  downloaded  a  software 
wallet.  CyberBucks  paid  for  software,  clip  art  and  other -^eft^good^  that 
would  normally  be  free.  Over  30,000  people  signed  up  for  the  trial.  A  year 
lateps^ihe  Mark  Twain  Bank  of  St.  Louis,  MO  issued  ECash  coins  in  real  U.S. 
dollars  as  a  trial. 

The  Swedish  Post  Office  offers  ECash  coins  in  Swedish  iQ-oners  (crowns). 
EUNet,  a  Finnish  bank,  also  offers  ECash  in  Finnish  Marks. 

ECash  provides  buyer  anonymity  once  it  has  been  purchased  and  its  source 
cannot  be  traced. 

The  seller  does  not  have  anonymity  for  once^^s  received  it^icc^s^i^be  ^ 
deposited  in  a.ha^^j£^  j 

Hence,  Chaum  refers  to  his  technology  as  having  "constrained  anonymitj^ 
The  buyer  can  prove  who  the  seller  is  by  reference  to  serial  numbers. 
Consequently,  ECash  may  be  good  for  purchasers  of  drugs,  but  it  is  not  good 
for  paying  kidnap  ransoms!  Exhibit  IV- 1  provides  the  workflow  diagram  for 
ECash  processing  between  a  purchaser  and  a  server. 
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Exhibit  IV-1 


Payment  Process  F'or  Using  DigiCashECa^ 


Purchaser 
ECash 
Wallet 


Ask 

For 

^& 

Get 

Cash 

Purchaser 

Web 
Browser 


Intitiate  Request 


Ask  For  Payment 


Send  Cash  From  Wallet 


Acknowledge  Payment 


Merchant 
ECash 
Software 


Source:  INPUT 

ECash  works  as  follows  when  there  is  no  firewall: 

r 

•  Purchaser's  \yeb  browser  sends  a  request  to  merchant's  web  server  to 
purchase  goods 

•  Merchant's  Aveb  server  asks  merchant  ECash  software  if  it  can 
request  payment,  merchant  ECash  software  sends  message  via  web 
server  back  to  purchaser's^eb  browser 

•  Purchaser's  web  browser  passes  request  for  ECash  to  purchaser's 
ECash  wallet  and  gets  cash 

•  ECash  is  sent  back  to  merchant  and  added  to  store  of  ECash  in 
merchant's  software 

•  Merchant  ECash  software  acknowledges  receipt  of  cash  and 
transaction  confirmation  is  sent  back  to  purchaser 

The  merchant  then  has  to  settle  with  the  bank  to  exchange  the  ECash  for 
real  currency.  The  method  has  to  be  modified  to  work  with  a  firewall.  It 
does  not  work  well  with  proxy  servers  at  present. 

In  the  case  of  Mark  Twain  Bank,  a  customer  has  to  maintain  a  conventional 
account  there-to  hold  real  currency  that  can  be  used  to  pay  for  ECash.  Set- 
up costs  are  $11  to  $25  lor  a  purchaser  and  $150  to  $500  for  a  merchant.  ^ 


2.  Advantages 

Anon5Tnity  for  the  purchaser .^^''''^^ 

Merchant  does  not  need  credit  card  account. 
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.  1^0  per^ransaction  fe^yiowevej;^'^^  merchant  pays  2-3%  to  convert  ECash  ^ 
'  into  real  currency,^  consumers  pay  between  nothii^  and  $3  to  convert  real 
currency  from  a  checking  account  into  ECash,;  consumers  moving  ECash  into  / 
the  checking  account  pay  4-5%  of  the  amourtt'.  lX 

Merchant  fees  include  technical  support  and  free  links  to  the  site  from 
DigiC ash's  home  page. 

3.  Disadvantages 

Leadingjedge  merchants  tend  to  use  credit  cards.  Not  many  merchants  are 
using  DigiCash's  ECash  at  this  time  and  many  that  are  doing  are  offering 
niche  goods,  e.g.j^NIX  software  for  Windows  '95. 

^^'^tle  bank  support  for  ECash^J^Mark  Twain  bank  in  the  U.S^Ul/et  in 
Apinland.^^     -^X^  '"^ 

^oes  not  work  well  with  firewalls  that  use  proxy  servers., ' 

[t^an  only  be  used  for  a  single  transaction,  unlike  conventional  notes  and 
A  cash.  Each  transaction  must  be  validated  with  the  issuing  bank  to  make 
sure  the  cash  has  not  been  spent  before. 

'^^^'^"^^0  automatic  data  capture,  a  user  must  set  this  up  for  himself.  S"^"^-^ 

When  a  disk  crashes,  ECash  cannot  be  recovered. 

4.  Security 

To  avoid  spending  ECash  more  than  once  it  is  tagged  with  a  number  that  is 
checked  .  J  ^  y^f 

When  a  merchant  is  offered  ECash  for  payment  of  goods  its  validity  is  tested 
against  the  issuing  bank's  database. 

ECash  processes  may  also  be  used  on  a  card,  giving  aSMtion6tl>pecurity  than 
that  provided  by  keeping  the  keys  off  a  computer.  ^ 

As  a  software-onl^solution,  the  safety  level  is  high  for  buyers,  seller^,Ngnd  the       O  \ 
issuing  bank,  ^hero  existo  j^n  iaauc  aa  to  who  doposito  ECach  first.-^ 
^^egfeftatc  aellcr  ei^jraad^gniimr^or   J^.  <^  •  ^  ^  ^ V\ 

Sellers  would  be  wise  to  deposit  the  ECash  ^irs^efore  shipping  goods. 

If  the  seller  does  not  ship  the  goods,  the  buyer  can  prove  he  sent  the  ECash 
and  pursue  the  seller. 
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5.       Market  Acceptance 

DigiCash  estimates  that  30,000  people  were  involved  in  its  trials  with 
pretend  currency  and  market  acceptance  was  reasonably  positive. 


However,  when  it  comes  to  real  payments  though  the  banking  industry  is  not 
behind  DigiCash.  Jr 

This  mean^^tJ^chants  have  few  places  to  redeem  their  ECash  for  real 
currency. 

6.       INPUT  Assessment 

The  widely  held  perception  that  EC^sh  is  good  for  drug  money  laundering 
and  illegal  activities  is  likely  to*^]^^false^Jbecause  of  the  lack  of  protection  for'" — 
anonymity  of  the  receiver  of  payment.  — *^ 

DigiCash  has  produced  a  strong  research  effort^  that  illustrates  flaws  in 
current  Internet  pajonent  processes.  ^  , 

ECash  may  be  used  for  certain  low^olume  purchases,  but  more  widely 
accepted  standards  are  likely  to  prevail.  DigiCash  may  be  better  sticking 
with  niche  markets  as  it  has  done  successfully  with  toll  road  cards  than  j><^ 
trying  to  be  a  general^urpose  Internet^^iuuon.^^ 

Competition  from  Visa,  M^ter^r(^nd  Mondex  is  likely  to  be  severe  long 
term:%"^ey  are  better  fun(iea/have  major  vendor  support  and  liave^global 
connections.  ^ 


Financial  Services  Technology  Consortlunv^e-^heck 

1.  Process 

Financial  Services  Technology  Consortium  (FSTC),  formed  in  September 
1993,  ^  a  consortium  of  some  65  organizations  comprising  banks,  financial 
services  firms,  industry  partners,  national  laboratories,  universities,  and 
government  agencies.  ^ 

FSTC's  Electronic  Check  (e-check)  is  an  online  payment  instrument  that  is 
settled  nightly.  -  ^  ''^ 

Cit  is  a  method  to  improve  the  clearing  process  in  today's  largely  paper-based 
check  processing  system. 

Banks  are  afraid^^^sumers  may  desert  checking  accounts, 'f^fevor  of  money 
market  and  other  accounts.  This  meansxlie  asset  base  from  which  loans  are 
made  may  shrink.  '\ 
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In  an  attempt  to  encourage  the  use  of  bank  checking,  ^-diecks  have  been 
designed  fo/^^h  "on  the  street"  and  "on  the  netj^^ 


Initial  pilots  use  a  PCMCIA  PC  card  that  can  be  inserted  into  a  standard  PC 
card  reader,  i 


The  card,  not  the  PC,  holds  the  user's  personal  information.  PCMCIA  was 
chosen  because  it  is  a  widely  accepted  standard  and  supports  more  data 
storage  than  a  typical^^mart  ^ard. 

PCMCIA  cards  typically  cost  $20,  more  than  6^imes  as  much  as  ^mart 
pards.  I 

At  a  POS  terminal  a  PCMCIA  card  reader  processes  the  card^  this  is  more 
expensive  equipment  than  widely  installed  magnetic  stripe  card  readers^  3, 

(^  J^owever,  notebook  and  personal  organizer  use  of  the  cards  is  expected  to 
make  prices  fall. 

The^-gheck  standards  will  not  preclude  the  use  of  j/mart  Guards  for  widely 
deployed  systems.  Indeed,  e^diecks  are  designed  so  that  they  can  be  sent 
over  many  different  hardware  architectures  and  networks.  A  workflow 
diagram  for  FSTC's.g^eck  processing  can  be  seen  at  th^^web  sit^^j-*^ 
www.fstc.org.  *^  t:^ 

The  FSTC  v^w^^j^^eck  processing  ift-a^milar  teshioato  paper  check 
processing.  -Tfeey^'^ould  batch  transactions  and  deliver  a  group  of  checks  to  a 
bank i  . 

Fees  may  be  on  a  perdeposit  basis  to  discourage  merchants  from  making 
many  small  deposits. 

The  recipient  of  a  check  can  verify  the  digital  signature,  as  paper  check 
signatures  are  verified  today. 

Optionally  funds  verification  service  like  Telecheck  may  be  contacted.  It  is 
likely  tha^  many  recipients  will  skip  check  verification  and  charge  fees  for 
i^returnedjitems^ due  to  insufficient  funds,  illegal  signatures  ^r  other  ^^^sony^ 
jQ*xheck  rejection.  / 

E-^ecks  will  dovetail  with  electronic  bill  presentment  (ebp^^^tra^large 
organizations  like  utilities  are  starting  to  consider.  / 

A  consumer  ^^uld  receive  an(e^ll,  complete  with  electronic  coupons, 
literatur^yor  advertisements.  This  could  be  returned-te.  for  payment  with  an 
(coupon "to  which  the  e^ctieck  ^uld  be  attached.  '\ 
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Graphical  logos,  icon^nd  art,  similar  to  that  found  on  web  pages,  could 
make  e-bills  attractive.  o 

For  business,  common  user  interfaces  could  be  designed  for  electronic  bill 
paying  and  existing  EDI  systems  to  simplify  user  training. 

For  EDI  transaction  payment,  the  ezcheck  may  be  sent  over  an  existing 

As  in  paper  check  clearing,  the  bank  of  first  deposit  (BOFD)  will  endorse  the 
^e^eck.  It  will  optionally  verify  the  signature  and  transmit  the  ^^eck  for 
presentment  to  the  issuing  bank. 

As  in  paper  check  processing,  there  may  be  intermediaries  like  the  Federal 
Reserve,  third--party  payment  processorsj^r  ACHs.  The  FTSC  hopes  the  e^^ 
^eck  may  foster  new  inte^ank  payment  networks-  such  as  BIPS  (formerly 
^EPH^^nother  FTSC  project.  ^ 

— ^l^l^IP^would  provide  netting  and  clearing  between  two  BlPS^capable  banks 
aad  also  interface  to  ACH  clearing  and  settlement  systems. 

E-ghecks  are  attractive  to  check  processors^^^^^t^^  significantly  reduce 
payment  processing  cost^)a^aper  handling  costs  are  high. 

Within  the  banking  system,  laws  will  have  to  be  changed  to  accept  a  digital 
signature  of  the  payee  and  permit  electronic  presentment  to  the  issuing 
bank. 

Just  as  Regulation  CC  governs  the  time  a  check  can  be  in  the  clearing 
system,  regulations  will  need  to  be  passed  for  enchecks  to  ensure^anks  don^ 
hold  on  to  the  float  for  too  long.  ' 


2j^^^^^T^|^cal  Customer 

'^^^^ayhigby/^fiec^is  in  businessA^ome  6tth^  transactions  will  be 

^Vundertaken  with  purchasing  ^ards,^B«^ome  could  move  to  j^eck? 

Citibank  and  Bank  of  Boston  are  driving  the  effort.  j^* 

^Anothej^ustomer^could  be  the  user  who  wants  to  carry  around  an  electronic 
wallet  instead  of  a  check  Book. 


3.  Security 

E;^ecks  are  securely  encrypted  and  carried  mainly  on  private  banking 
networks.  Public  and  private  keys  are  kept  on  a  card  or  in  software. 
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Signing,  verification^^nd  hashing  functions  are  kept  in  a  protected  processing 
area  in  a  PCMCIA  implementation,  not  on  the  host  computer.  This  may  be 
more  secure  as  it  is  not  open  to  attacks  on  the  host.  / ^ 

If TSOfifteone  4oses^a  card^tl^etf^i^ould -lead  tes^fraudulentttfl^ji  the  correct  ID 


4.  Advantages 

The  e=check  enables  banks  to  use  their  existing  infrastructure  for  check 
processing  to  support  Internet  and  other  electronic  payments.  The  digital 
signature  offers  more  security  than  a  physical  signature  on  a  paper  check. 

E-^eck  workflow  follows  existing  paper  check  processes  to  enable 
acceptance  by  banks  and  payment  processors. 


E-^heck  design  enables  great  flexibility,,  tnrough  support  for  other  types  of 
parent  instrumen^le.g^ertified  check,  cashiers  check,  credit  card  charge 
slip,  etc^^and  added  capabilities,  such  as  futuradating,  limit  checks,  and 
mult^urrency  payments.  It  is  unfortunate  th^PCMCIA  cards  have  been 
the  first  encoding  of  the^^^check  for  a  customer.  Embedding  it  in  Quicken 
would  have  given  it  a  better  chance  of  early  success. 

^  ^0  need  to  use  an  EDI  service  provider,  pne  Internet  is  sufficient. 

Both  large  and  small  users  can  use_e=checks,  enabling  corporations  to 
jremburse  employees  and  consumers  to  buy  from  large  and  small  merchants. 
^I^J^q£^q\s>o  be  sent  from  consumer  to  consumer.  Receiving^gzchecks  enables  « 
'^significant  electronic  credit.  This  can  be  an  advantage  tothe  payee,  who^^  KrX^v^ 
iia^unds  without  going  to  a  physical  bank. 

The  e^check  can  be  integrated  into  other  payments  systems,  such  as 
micropajmient  billing  systems. 

The  payee  can  authenticate  the  payi$r  using  digital  signatures  with  a  higher 
level  of  security  than  is  possible  with  today's  checks.  Digital  signatures  can 
be  validated  automatically,  more  easily  than  comparing  paper  check  , 
signatures^  ^sing  either  the  human  eye  or^ignature  verification  system^  E- 
^ecks  are  expected  to  cut  down  on  check  fraud. 

Data  capture  on  deposits  will  be  easily  performed  by  banks,  once  their 
j^eck  systems  are  installed,  offering  banks  the  opportunity  to  provide 
(possibly  for  a  fee)  more  meaningful  deposit  logs  and  bank  statements  to 
their  customers. 

Once  systems  have  been  installe^he  cost^  of  processing  erchecks  should  be 
a  fraction  of  the  cost  of  processing  paper  checks. 
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5.  Disadvantages 

Significant  investment  in  bank  systems  and  tracking  edchecks  will  require 
new  soft;ware  and  it  is  not  clear  that  banks  are  prepared  to  make  the 
investment,  given  check  truncation,  image  scanning  capture  of  paper  checks  ^ 
and  the  popularity  of  paper  checks. 

Packaging  erghecks  so  that  they  are  easier  for  the  consumer  to  handle  than 
paper  checks  will  be  a  major  effort.  Given  the  rise  in  debit  cards,  it  is  not 
clear  that  consumers  will  need  to  carry  another ^checkjcard. 

Merchants  are  unlikely  to  integrate  PCMCIA  card  readers  with  their  POS 
systems  just  for_^hecks.  Adding  them  to  handle  many  tasks  is  possible,  but 
e-checks  may  not  be  the  driving  application.  Visa  and  Master^rd  see 
irterchant  upgrading  to^mart  0ard  readers  in  the  1997-1998  timeframe,  but 
upgrading  to  PCMCIA  card  readers  is  less  likely.  In  addition,  at  least  4  ^^irv.^ 
financial  services  groups  are  pushing  different  check  image  capture  at  the 
POS  schemes  on  large  retailers,  which  they  feel  unable  tosupport.  If^ 
xhecks  cannot  be  accepted  at  the  POS  it  seems  unlikel^mey  will  gain 
support  elsewhere. 

E-^ecks  are  late  to  markeu  debit  cards  and  other  electronic  credit  card 
scHemes  are  ahead  of  thenfc 

6.  Market  Acceptance 

Growth  of  checks  is  lower  than  that  for  credit  card  payments.  However,  a 
healthy  5%  annual  growth  in  check  processing  for  the  last  five  yearsi^eans  ^^^^^ 
the  e^^heck  market  has  potential.  This  would  indicate  a  long\|term  revolution^ 
.    pf  the  ch^ck  processing  environment,  not  a  short  -term  solutiori.  It  is  unlikely 
■^"^^^''^ll^ewi^espread  before  the  turn  of  the  centur^if  at  all.  ^ 

The  major  US  banks,  including  Bank  of  America,  Bank  of  Boston,  Bank  of 
Montreal,  Bank  One,  Chemical  Bank,  Citibank,  and  Wells  Fargo  Bank  are 
involved  in  FSTC  projects. 

Industry  participants  include  BBN,  Equifax  Check  Services,  IBM,  National 
Semiconductor,  Sun\and  Telequip. 

Advisors  include  Bellcore,  Oak  Ridge  National  Laboratory,  Sandia  National 
Laboratory,  NACH/y^nd  others. 

Telequip  supplies  its  Crypta  Plus  memory  card  and  token  technology  in  an  e^ 
^pheck  board  version.  ^ 

National  Semiconductor  has  been  offering  the  project  a  PCMCIA  solution. 
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7.        INPUT  Assessment 

E-cJoecks  are  an  electronic  version  of  a  paper  check.  Usually,  automating  a 
paper  process  is  not  an  efficient  way  to  move  from  a  paper  environment  to  an 
electronic  one.  E-jJaeck  processes  for  the  purchaser  are  yet  another  process 
using  digital  signatures,  and  INPUT'S  research  does  not  indicate  high 
interest. 

From  the  check  processor's  perspective,  e^hecks  are  less  threatening  o  * 
existing  organizations  and  power  structures  built  around  check  processing;^ 
than  credit  card  or  entirely  new  processes. 

Currently<paper  check  processing  is  accompanied  by  electronic  records  that 
can  be  adapted  ^nd  modifie^to  support  e^hecks. 

Check  truncation  is  seen  as  .an  alternative  to  ercheck  processing,  with  users 
still  having  paper  checks^ather  than  electronic  checl^ooks.  Debit  cards 
are  the  most  serious  competition  to  e=checks,  as  both  processes  remove  cash 
from  a  purchaser's  checking  account  directly. 

CheckFree,  although  it  relies  on  unsigned  drafts  and  ACH  networks  for  bill 

provided  in 

 „  consumers 

to  pay  from  AOL  or  Quicken^^Ciiat  supports  banks  directlyvVvill  also  compete 
with  fcchecks.  ^  6  ) 


First  VirtualxOff-the-lnternet  Security 


n 


1.  Process 

First  Virtual  Holdings  was  founded  in  1994  by  a  team  that  included 
Nathaniel  Borenstein,  who  invented  the  widely  used  MIME  e-mail  protocol 
while  at  Bellcore,  and  Marshall  Ros^j^ho  has  written  highly  regarded  books 
on  Internet  technology.  Other  members  of  the  management  team  were  from 
Hollywood  and  the  entertainment  industry,  providing  a  virtual  company 
connected  via  networks.  ^ 

First  Virtual  relies  on  "out  of  band"  security^  that  i^he  credit  card  number 
is  not  connected  to  the  In^ppiRt-Iti^e^nn  ^  separate  serve^at-Firsfe-^ 
"VirtuaLaiiS^ent  to  wiSfflfby  pnone  or  mj^^rst  Virtual  acts  as  a  trusted 
third  party  between  biiyerand  seUeri^^-V 

A  firs^ime  shopper  has  to  register  an  account  with  First  Virtual. 


EEA6 


©  1997  by  INPUT.  Reproduction  Prohibited 


41 


I 


J 


ELECTRONIC  PAYMENT  METHODOLOGIES 


INPUT 


Initial  communication  is  by  e-mail  and  a  potential  account  holder  is 
reminded  regularly  to  hand  over  tht^^^redit  card  number  via  phone  to  First 
Virtual  before  a  transaction  is  made.  ^ 

Once  the  holder  has  an  account  ^ney  get  a  VirtualPIN  and  First  Virtual 
handles  the  credit  card  authorization.  ^ 


Each  time  a  customer  makes  a  purchas^n  e-mail  is  sent  to  First  Virtual 
that  is  then  confirmed  by  e-mail  and  telephone. 

Vjl  5 

The  buyer  responds  to  jin  e-m^from  First  Virtual  asking  if  tfee;^antto 
buy  with  '^&i^X^^^\YrQ^^^'Va&  latterjneaning  the  product  is  not^ 
_v     wanted.  In  the  case  of  a^'f3ud"'reply^^e  account  number  will  be 
blacklisted  and  a  new  VirtualPIN  assigned. 

Accounts  are  settled  with  merchants  using^ACH  to  credit  the  merchant's 
checking  account.  First  Virtual  keeps  transaction  logs  and  information. 

For  fulfillment  of  soft  goods,  the  VirtualPIN  is  sent  to  the  merchant,  who  will 
verify  that  it  has  not  been  blacklisted  by  First  Virtual  and  will  send 
electronic  goods  to  the  purchaser.  Exhibit  IV-2  shows  the  workflow  diagram 
for  how  the  payment  transaction  is  carried  out  for  delivery  of-sofTgoods  that 
can  be  sent  over  the  Internet,  such  as  information. 
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Exhibit  IV-2 


Payment  Process  ^or  Soft  Goods  Using  First  Virtual 


Credit  Card  Acquirer 


I 


7.  If  Yes, 
Process 
Credit  Card 


5.  Are  You 
Happy  To  Pay? 


i 


Fir 


1.  Purchase  Request  With  VirtualPIN 


3.  Send  Soft  Goods,  e.g.  Information 


2.  Blacklist 

4.  Purchase 

Check 

Notified 

Merchant 


Source:  INPUT 


2.       Typical  Merchant 

The  typical  merchant  is  a  small  organization  that  does  not  qualify  for  a 
credit  card  number.  These  include  gift  vendors,  publishera^and  software 


sellers 
3.       Advantages  , 

/Simple  for  the  buyer  to  understand.  Buyer  (only  needs 
account  '  ^  ^^-w^ — . 


credit  card  ande-mail 

liV 


First  Virtual  provides  a  software  toolkit  to  support  merchants  tb€^  have 
their  own  servers.  a 
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Merchants  without  servers  can  rent  space  on  First  Virtual's  InfoHaus  mall 
($1.50  per  megabyte  per  month). 

First  Virtual  provides  a  service  to  small  merchants  who  cannot  qualify  for 
credit  card  accounts,  or  for  whom^ey^re  p'ixJKi^itively  expensive. 

4.  Disadvantages 

First  Virtual  does  not  credit  the  merchant  until  a  certain  balance  is  reached, 
whereas  a  credit  card  acquiring  bank  usually  settles  the  account  the  day 
after  credit  card  slips  are  deposited.  For  some  merchants.  First  Virtual  can 
hold  payment  for  as  long  as  90  days. 

Buyers  may  repeatedly  type  "NcM  abusing  the  system.  First  Virtual 
monitors  such  cases  and  removes  accounts  that  abuse  the  system. 

Users  cannot  complete  "transaction  in  one^^^^g,        need  to  send  an  e-mail 
and  possibly  telephone  First  Virtual.  The  buying  process  is  slow  and 
unsuitable  for  impulse  purchases. 

For  the  nu^cJiase  of  physical  goodssthe  buyer  can  repudiate  the  purchase, 
denying^ne  goods  were  ever  ordered  and  causing  the  merchant  a  fraudulent 
loss. 


Telephone  ^rder  (TO)  Companies  typically  ask  the  buyer  for  additional 
information,  such  as  a  billing  addres^ever-the^hoi^ and  then  they  get 
verification  that  the  goods  were  received  by  like  FedEx  and 

UPS  t^ obtain^ignaturei  from  the  recipient. 


A 
I 


5.  Security 

Keeping  credit  card  numbers  off  the  Internet  makes  the  system  as  secure  as 
for  a  typical  Telephone  Order  (TO)  merchant. 


6.       Market  Acceptance 

By  March  1996,  First  Virtual  had  signed  up  109,000  consumers  and  1,370 
merchants  in  144  countries. 

.C>CO 

In  early  1996,  First  Virtual  was  estimated  to  be  moving  $6(XK  worth  of  trade 
per  day  and  signing  up  about  -^00  customers  a  week.  It  charges  customers 
$2  (waived  until  mid-1997)  and  sellers  $10  to  register. 

The  merchant  also  pays  29  cents  plus  2%  of  the  sale  amount  on  each 
transaction.  Each  time  a  payment  is  made  to  their  account,  sellers  pay  a  $1 
processing  fee. 
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Fraud  rates  are  currently  low,  but  so  they  were  when  credit  cards  first 
started.  The  charge-back  ratio  so  far  is  about  0.02%. 

7.        INPUT  Assessment 

Pr^aid  digital  cash  and  cash  card  schemes  will  become  the  norm  for  paying 
for  small  items. 

First  Virtual  is  doing  a  service  for  the  small  merchant,  but  it  is  not  likely 
that  users  will  suffer  the  inconvenient  user  interface  for  long. 

Merchants  depend  on  the  solvency  of  First  Virtual  for  their  payments,  which 
may  be  slower  in  coming  to  them  than  if  they  were  using  a  bank. 

When  banks  and  credit  card  processors  widely  support  smaller  merchant^ 


First  Virtual's  system  will  not  be  attractive  to  them.  ^ 

The  technologists  at  First  Virtual  are  slF©»g^they  will  either  think  of.oth^ 
things  to  d^r  leave  and  create  another  company. 


First  Virtual  is  likely  to  follow  industry  standards  andxhangc  into  a 
different  type  of  company  or  be  dwarfed  by  SET  systems  supportea  by  the 
major  banks,  Microsoft,  VeriFone,  RSA,  Visa,  Mastercar^and  others. 


Micropayment  Systems,  including  Visa 


1.  Process 

Micro,  nano,  pico  payment  systems  all  deal  with  paying  in  small  amounts  on 
the  Internet. 


^aid  subway  tokens  and  me^a'-^  ~^  


.7 


Fare  cards,  preT^jaid  subway  tokens  and  pre/paid  phone  cards  are  example^of 
stored  value -eardi^nstruments. 

Users  trust  the  card  provider  to  honor  the  values  Ibej^re  not  issued  by  a 
government,  and  if  the  card  is  not  used  for  its  intended  purpose  its  value  is 
wasted. 

In  micropayment  systems,  the  user  pays  in  advance,  simplifying  downstream 
processing  and  reducing  transaction  costs. 

A  U.S.  positioning  of  different  proposals  is  given  in  Exhibit  rV-3.  In  Europe 
and  elsewher^N^rivacy  laws  may  make  banks  unable  to  use  purchasing 
information.  ) 
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3.  Pitfalls 

Processing  a  purchase  order,  invoic^and  shipping  receipt  is  estimated  to  cost 
from  $20  to  $80.  Tight  financial  controls  and  integrated  accounting  systems 
provide  high~quality  reports,  but  at  significant  cost. 

EDI  is  not  widely  acceptedf  0  ,  ^ 

Standards  for  different  paper  forms  abound/in  additiom there  are  U.S. 
standards  and  international  EDIFACT  stancMrds  J 

EDI  formats  are  data  processing^riented,  with  fields  that  track-witk  paper 
documents  such  as  purchase  orders.  ^ 


!  ^b  it 


On  the  web  it  is  not  clear  that  this  kind  of  interface  is  useful.  Users  may 
prefer  t6  enter  fulj^text  comments,  send  their  digital  certificate  with  personal 


display  the  price 
user  on  a  web  form  and  look  it  up  in  the(r  database  when  ordered. 


4.  State^of'^the/^rt 

EDI  is  used  by  about  40,000  companies  in  the  U.S.,  a  small  proportion  of  the 
total  number  of  firms.  It  is  best  for  regular  transactions,^  rather  than  casual 

purchases.  Web  purchasing  is  more  likely  to  be  used  for  "one-off  purchases. 

/V 

Primary  commerce,  where  goods  are  used  in  the  production  of  a  company's 
products,  is  where  EDI  is  most  likely  to  be  used,  rather  than  in  secondary 
commerce  that  supports  the  administration  of  the  business. 


H 


Outsourcing  Data  Capture  and  Data  Aggregation 

INPUT  research  indicates  that  many  large  organizations  have  already 
outsourced  some  portion  of  their  data  capture  or  data  aggregation  associated 
with  payment  processes  to  financial  system  outsourcers  or  trading  partners. 
Examples  of  processes  that  are  outsourced  are: 

credit  card  processing 

FEDI  (financial  EDI)  and  EDI 

lockbox 

payroll 

billing 
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Interested  readers  should  contact  INPUT  about  its  Outsourcing  Program  for 
further  information  in  this  area. 
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Positioning  Of  Micropayment  Vendors 


No  bank  privacy 

Source:  INPUT 


Checking  accounts  preserve  value  and  are  insured  up  to  $100,000  in  the  U.S. 
Stored  value  systems  for  the  Internet  typically  store  up  to  $500.  Disposable 
smart  cards  usually  come  in  small  denominations  up  to  $20. 

Reloadable  cards  can  be  filled  fi"om  a  bank,  using  a  credit  card  or  other 
means.  No  system  permits  a  user  to  carry  tens  of  thousands  of  dollars  in  a 
smart  card  or  notebook  computer. 

In  Europe  and  Japan,  high  telephone  charges  motivated  the  move  to  smart 
cards  to  reduce  credit  card  verification  costs. 


2.  Security 

SoftwareTonly  micropayments  systems  like  DigiCash  ECash  and  CyberCash 
Coin  use  keys  stored  on  a  PC. 

When  a  user  enters  a  Pll^a  virus  may  enter  the  computer  and  steal  it.  PCs 
are  vulnerable  to  attack.  ^  ^ 

Banks  feel  happier  with  security  information  stored  in  a  card  that  can  be 
stored  in  a  purse  like  a  key  and  kept  safe. 

Hardware  wallets  also  offer  some  protection^  gwea^they  are  worn  on  or 
carried  close  to  the  user. 
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3.       Market  Acceptance 

Global  cash  transactions  amount  to  $8.1  trillion  a  year,  of  which  22%  ($1.8 
trillion)  is  for  amounts  less  than  $10.  In  the  U.S.>estimates  of  consumer  cash 
transactions  are  around  300  billion  (Source:  Bank  for  International 
Settlement),  and  225  billion  are  under  $20  (Source:  American's  Community 
Banker,  May  1995). 

In  the  U.S.  56%  of  transactions-estinaated^trbft  made  in  cash.  Worldwides-N^ 
cash  accounts  for  90%  of  all  transactions^  An  estimated  60  billion  bank^  ^ 
facilitated  consumer  transactions/o)ie-fifth  the  number  of  cash  transactions, 
use  credit  card,  debit  card,  ATMcard,^eck^nd  wire  transfers.  v 
Automating  cash  handling  is  the  incentive  to  use  smart  cards  (cash  cards). 
It  is  likely  that  there  will  be  gradual  acceptance  of  smart  cards,  but  it  is 
unlikely  that  half  of  all  cash  transactions  will  use  smart  cards  by  the  year 
2000,  as  some  industry  estimates  would  indicate. 

Visa  has  trials  of  Visa  Cash  in  Australia  and  it  had  a  trial  system  at  the 
1996  Olympic  Games  in  Atlanta. 

First  Union  and  Wachovia(1bank^^eretwo  of  the  firs^o  offer  Visa  Cash 
cards,  which  come  in  disposable  or  replenishable  versions.  Many  more  are 
expected  to  follow. 

Disposable  Visa  Cash  cards  can  be  purchased  by  anyone/albanking 
relationship  is  not  needed.  In  Atlant^hey  were  available  in  denominations 
ofupto$100.  ^ 

Visa's  Electronic  Purse  consortium  includes  an  international  group  of  banks, 
including: 

•    Bansys,  Belgium 

EPS  (Electronic  Payment  Services),  Delaware 

FISC  (Financial  Information  Systems  Center),  Taiwan 

CD  Groupement  des  Cartes  Bancaires,  France 

Sociedad  Espanola  de  Medios  de  Pag^f  Spain) 

Austria,  Portuga^Nfind  Denmark  have  their  own'^ash  card  schemes.  MAC 
ATM  network  was  proposing  a  unified  ACH  card,  but  prospective  banks  are 
turning  to  Visa  and  Mastercard. 
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Mini-micropayment  schemes,  designed  for  fraction  of  a  cent  tmnsaction^re 
proposed  by  Digital  (Millicent),  W3C  (Micropayment  Transfer  Protocol)^^nd 
Payword/Micromint  from  Ron  Rivest  of  MIT. 

These  are  being  proposed  for  metered  apalications,  where  payments  may  be 
in  fractional  amounts.  Whether  users^rtee^o  buy  small  items  like  nails  for 
a  fraction  of  a  cent  remains  to  be  seen. 


4. 


INPUT  Assessment 


Mondex^  Cash  Card 


Micropa5rment  schemes  are  viable  and  many  alternatives  will  be  available. 
These  will  vary  by  vendoi(^ertain  industries  may  prefer  certain  schemes, 
depending  on  who  vendors  target. 

Mondex,  Cybejxash  Coii>)0nd  DigiCash  ECash  are  discussed  in  this  chapter 
in  their  own  sdctions.  Visa,  Mastercard  and  Mondex  are  likely  to  be  leaders. 


s 


1.  Process 

Mondex  was  invented  at  the  National  Westminster  Bank  in  1990.  In 
July  1996  it  was  spun  off  and  is  now,pwned  bV  l-T-wfsniZaSmis 


4>IatWestTRiaTSTidland  Bank  PLCTT^^^ 

The  llprtgkovLg  and^hanghai  Banking  Corporation  Limited  (Hong  Kong 
12  fur]tner  ^ia/Pacifjc-fecT^tories 

Canadjmi  Iifip 
(Cane 


iai  Bank^^ []!ommerce  and  Royal  Bank  of  Canada 


•    Ausfef^lia  and  New  Zealand  BanMng^GiwlpLimitedTCommonwealth 
ink  of  Australist;  National  Australia  Bank  Limite(J^3nd  Westpac/^ 
Banking  Corporation  (Australia);  ANZ  Banking  Group  (NewZgaland) 
Limited,  Bank  of  New  Zealand^Gountrywide  Bankijig<!orporation 
Limited,  the  National  Banje6f  New  Zealand  Liirtited,  ASB  Bank  Limited 


and  Westpac  Banking  COTpo'ration  (Ne^t-Zealand^ 


Mondex  wallets  have  been  developed^ by  such  manufacturers  as  Hitachi. 
They  are  calculator-like  and  a  Mondex  card  may  be  inserted  in  the  wallet  or 
carried  separately. 
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The  advantage  of  the  wallet  is  that  it  may  be  used  to  store  additional  vedue^ 
beyond  card.  Mondex  cards  may  also  be  read  by  PC  peripherals 

or  POS  terminals.  v 


Cash  may  be  sent  from  Mondex  card  to  Mondex  card  over  a  network/ such  as    t  . 
the  Internet.  Hence;*Mondex  provides  a  system  that  is  both  "on  the  street" 
"on  the  netfc^The  Mondex  system  can  be  used  at  adapted  ATM  machines, 
special  phones,  PC^nd  POS  terminals  with  appropriate  card  readers.  Since 
it  is  shared  electronic  information,  it  can  be  relayed  over  the  special  phones. 

Exhibit  IV-4  shows  how  soft  goods  can  be  ordered  using  a  Mondex  card.  The 
card  is  inserted  in  a  card  reader  in  the  user's  PC  on  request  from  the 
merchant.  Each  card  is  validated. 


The  process  is  similar  to  that  of  DigiCash,  but  more  tracking  takes  place  in 
the  card. 

In  the  San  Francisco  trial^he  last  ten  payments  ar^ecorded  and  then 
cyclically  written  over.  So  if  a  card  was  founcka  bank  could  trace  its  last  10 
transactions.  ^  ' 

Transactions  are  not  completely  anonymous. 

There  are  no  monthly  statements. 


Exhibit  IV-4 


Payment  Process  For  Soft  Goods  Using  Mondex 


Purchaser 
Mondex 
Card 


Ask 
"Insert 

Card" 

Xnd 
Get 

Cash 
Out  Of 

Card 


Web 
Browser 

And 
Mondex 
Card 
Reader  On 
PC  or  POS 
System 


Intitiate  and  Confirnri 
Request 


Ask  For  Payment 


Send  Cash  From  Card 


Acknowledge  Payment 
Send  Goods 


— ► 

Merchant 

Web 

Server 

HIIIB 

Validate 
Purchaser's  Card 
and  Currency 


Merchant 
Mondex 
System 


Get  Cash  From 
Purchaser 


Source:  INPUT-^O^ 


A  consumer  needs  a  bank  account  with  a  sponsoring  bank.  At  a  minimum,  a 
consumer  needs  a  Mondex  card,  but  may  also  rent  or  buy  an  electronic 
wallet,  PC  card  reade^and  balance  reader. 


Manufacturers  of  Mondex-compatible  equipment  include  Hitachi, 


Unisys,  Amdahl,«^nd  Keycorp 


r 
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Value  can  be  transferred  to  retailers  and  also  to  other  individuals  that 
support  the  system.  Transaction  detail  can  be  viewed  with  a  wallet  or  with  a 
balance  reader  that  looks  like  a  key  chain. 

A  merchant  would  normally  transfer  the  contents  of  the  till  by  phone  to  a 
bank.  Only  the  cash  sum  is  sent  to  the  ban^POS  details  are  kept  in  the 
merchant's  cash  register. 

For  a  robber  to  get  cash  from  a  Mondex  till,  he  would  need  the  PIN  auflabei^ 
of  each  card  that  had  put  cash  into  the  till. 

The  till  records  each  card  number  to  or  from  which  cash  is  transferred  and 
the  amount.  This  makes  it  possible  to  get  refunds.  The  refund  is  linked  to 
the  card  that  put  cash  in  the  till. 

Bringing  a  merchant  a  receipt  for  returned  goods  will  be  insufficient  to  get 
electronic  cash.  The  card  that  made  the  purchase  will  be  needed. 

2.  Typical  Users 

Any  vendor  that  accepts  credit  cards,  either  in  a  store  or  over  a  networksjs 
likely  to  be  a  candidate  for  Mondex. 

3.  Advantages 

The  merchant  has  tremendous  incentive  to  use  Mondej^s  it  facilitates  cash 
management.  Banks  also  see  Mondex  as  reducing  cash  handling  costs. 

Consumers  can  use  Mondex  with  many  different  devices. 

4.  Disadvantages 

In  the  Swindon  (U.K.)  trials,  10,000  purchasers  signed  up,  well  below  the 
40,000  expected.  Cost  of  the  service  was  one  reason  consumers  balked. 

Devices  like  ATMs,  POS  card  reader^and  telephones  are  starting ^be  mad^  ^ 
that  support  Mondex  devices.  Conversion  will  not  be  overnight  an^^ll^^cosl*  % 
users  and  merchants.  Banks  will  offer  rental  programs  to  smooth  the 
transition  to  new  equipment. 

Whereas  the  architecture  of  the  Mondex  sjKtem  is  designed  for  all 
transaction  values,  it  is  being  promoted/as  a\ystem  for  storing  under  500 
pounds  sterling  ($750)  at  a  consumer's  sitf^^i^iUalljj;  to  prevent  large  losses  or 
major  errors. 
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5.  Security 

Wells  Fargo  Bank  chose  Mondex  because  it  was  more  secure  than  storing 
electronic  cash  on  a  PC  and  the  processing  was  well  thought  out.  Banks  will 
be  reluctant  to  send  electronic  cash  to  a  PC  without  a  separate  store  of  value, 
like  a  Mondex  card. 

Mondex  plana-tochange  the  software  in  its  cards(^very  two  years  aTIeastko 
keep  upfmlitia2t^p^in4^H*^rB  that  may  seek  to  break  security  codes  and 
protocols.  The  digital  signatures  on  merchant  and  consumer  cards  are 
changed  frequently. 

When  a  consumer  withdraws  cash  for  a  Mondex  card  from  a  bank  account  or 
a  merchant  makes  a  deposit  of  Mondex  electronic  cas^^igital  signatures 
may  be  changed.  Each  chip  (initially  a  Hitachi  microprocessor)  in  a  Mondex 
card  has  two  different  security  systems  on  board:  one  active,  one  dormant. 

Periodically^^ards  are  instructed  to  activate  the  dormant  system.  This  then 
becomes  the  active  system  over  time  and  a  new  dormant  system  can  be 
adde^i^is  enables  upgrades  to  be  made  without  changing  the  physical  card. 

When  data  is  sent  between  cards^he  cards  are  known  to  the  protocol,  so  that 
a  hacker  with  a  different  card  from  the  intended  recipient  will  not  be  able  to 
intercept  the  transaction. 

Privacy  International,  a  consumers' ri^^  toprlm.cy  group,  has  filed  a 
complaint  against  Mondex  for  falsely  advertising  that  it  is  just  like  cash. 
They  claim  that  since  the  merchant  has  a  list  of  purchasers  that  the  bank 
may  use  to  track  payee^his  makes  it  less  private  than  cash. 

6.  Market  Acceptance 

The  main  pilot  program  has  been  in  Swindon  (U.K.)^vWhere^yer.^%^oft^he 
town's  ^00  merchants  could  accept  the  card.  In  addition,^T)was  recruited 
to  equip  200  payphones  with  the  ability  to  read  Mondex  card^and  taxicab 
drivers  were  able  to  accept  them.  ^ 

^  ^ore  than  10,000  cardholders  signed  up  for^^elow  the  desired  40,000 
participants.  Special  screen  phones  to  refill  the  cards  and  act  like  in-home 
cash  machines  were  deployed  at  some  consumer  and  merchant  sites. 

In  addition,  bank  AT^^machin^were  modified  to  take  Mondex  cards.  Wells 
Fargo  Bank  in  San  Francisco  has  been  trialing  the  Mondex  system  in  the 
city's  financial  district.  Further  trials  are  planned  in  Hong  Kong  and 
Canada. 
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The  key  to  a  successful  trial  is  getting  a  critical  mass  of  merchants  to  accept 
the  cards. 

Mondex  is  expected  to  coexist  with  credit  card  company  cash  schemes. 
VeriFone's  new  SC  line  of  card  readers  works  with  Visa,  Mastercard^and 
Mondex  cards. 

Mondex  expects  that  some  cash  will  always  be^used^art^ula^      the  gray 
market  and  for  pajdng  people  unable  to  afford  Monow^^ctrasfs^     as  low 
income  households  and  beggars. 


7.       INPUT  Assessment 

Mondex  is  well-poised  to  be  a  winning  micropayment  system,  especially 
across  national  boundaries,  because  of  its  international  support.  Currentlyv 
Mondex  cards  can  store  up  to  6  currencies  at  one  time.  p 

Mondex  trials  have  been  well  received  by  merchants  who  save  time  in 
counting  change  and  settling  with  the  bank,  in  their 

receipts  instead  of  physically  transporting  them  to  the  bank. 

Mondex  does  not  provide  a  full  audit  trail,  and  government  bodies  and 
several  major  banks  have  felt  that  this  would  be  necessary.  MasterCard 
plans  to  provide  audit  trails  for  larger  amounts  (as  dictated  by  government 
offices  in  each  country). 

Mondex  has  good  multicurrency  and  multiple  account  capabilities.  The 
latter  can  be  used  for  credit,  debij^^and  other  purposes,  supporting  a 
multifunctional  card  concept. 

Mondex  is  well  aware  of  the  regulatory  issues  surrounding  electronic  cash 
and  has  made  presentations  before  the  U.S.  congress. 

Visa  Cash  is  expected  to  be  a  major  competitor. 


Mondex  is  not  fully  compliant  with  the  standards  developed  by  Visa, 
MasterCar(Jsand  Europay  (EMV),  but  MasterCard  has  specified  tha^.  as  a  j 
term  of4te^cquisition  of  51%  of  Mondex.  t  .^j,l.a^c 

Most  banks  are  much  more  interested  in  SET  technology  that  can  be  used 
with  credit  cards  on  the  Internet  for  on-line  payment  transactions  «ttheK 
than  Mondex  or  other  electronic  purse  concepts. 
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Netscape  and  Others/. Credit  Cards  Using  SSL 

M 

Process 


1. 

Netscape's  SSL  (Secure  Sockets  Layer)  uses  CCITT  X.509  signed  certificates. 

Netscape  uses  VeriSign  as  itsjiertificate  authority. 

^'^^ 

Merchants  are  widely  using  certificates  and  consumers  are  just  starting  to 
use  them. 

(' 

Secure  sites  are  sometimes  designated  with  "https//...",  father  than 
"http//... "^Netscape  builds  SSL  security  into  its  Navigator  browsers  and  into 
some  of  its  servers,  the  first  being  the  Netscape  Commerce  Server. 


0/ 


SSL  is  a  protocol^ that  allows  many  variations,-thai^uns  over  TCP/IP.  A 
major  strength  is  that  it  is  independent  of  the  protocols  like  HTTP  that  run 
above  it.  It  is  used  to  carry  a  record  securely  across  the  Internet  and  to: 

Authenticate  the  server,  and  optionally  the  user.---'*^ — 

Ensure  the  communication  between  browser  and  wsb  server  is  private..^-J2i^ 
Ensure  ihe  transmission  is  reliable,  assuming  the  underlying  TCP/IP 


network  behaves  well^_^ 


SSL  can  be  used  for  any  record  and  is  relatively  low^level.  It  is  only  designed 
to  connect  client  and  serve^,'ndf'for  multi^^endor  situations.  A  typical 
transaction  involves  buyer,  sellej^and  credit  card  authorizer  at  a  minimum, 
hence  more  complex  security  protocols  are  being  designed. 

Exhibit  IV-5  gives  the  workflow  for  how  SSL  is  used  toi^ecure^transmit  a 
record,  such  as  a  credit  card  number,  over  the  Internet, 

CUent  sends  CLIENT  HELLO: 


Contains  Challenge  field,  equivalent  to  "^((other's  jf^aiden  ^me" 
other  data  commonly  used  by  banks  to  recognize  k  user^_o 


or 


Contains  information  on  cipher  used  by  the  server,  such  as  algorithm 
used  and  key  lengtli(^for  exampl^yi^n  exportable  version  of  Netscape 
may  use  40|bitsN^hereas  a  U.S.  version  may  use  128|bits.^ 

Wells  Fargo  bank  rejects  a  client  for  its  online  banking  system  if  it 


only  has  a  40-bit  key  implementation. 
Server  sends  SERVER  HELLO: 


^ 
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Responds  to  client  by  sending  its  certificate  from  a  registered 
authority  like  VeriSign_X^ 

Sends  specifications  of  encryption  used  for  the  record  that  will  be 
encoded  after  the  key  exchange  phase,  usually  the  lowest  common 
denominator  between  browser  and  server,.^_^^^ 

Client  sends  CLIENT_MASTER_KEY: 

Before  sending  the  messag^he  client  verifies  that  the  certificate  is 
goo(^i|he  first  time  this  is  sen^he  client  user  may  just  have  to  trust 
that  ifthe  server  looks  genuin^  and  sends  a  certificate  that  looks 
genuin^t  probably  is  genuine. 

The^b  server  merchant  may  also  send  the  challenge  to  the  user  by 
anotSer  route^such  as  th^hone,  fax  oriHTan  e-mail  messageyhk 
foolproof,  but'^creases  the  security  somewhat. 

Assuming  the  client  accepts  the  certificat^t  has  a  trusted  copy  of  the 
servei)s  public  key.  ^ 

It  then  generates  new  symmetric  keys  from  the  public  key  and  sends 
these  back  to  the  server,  encrypting  them  with  the  server's  public  key. 

Server  sends  SERVER_VERIFY: 

The  server  knows  the  encryption  algorithm  used  by  the  client  and  its 
public  key,  hence  with  its  secret  key  it  can  decrypt  the  new  encoding 
of  the  symmetric  keys  sent  to  it  fi-om  the  client. 


•  If  SSL  ^  implemented  with  good  algorithms  and  long  enough  keys,  no 
HMH^n-^hewniddle  is  likely  to  intercept  the  encrypted  symmetric  keys 
-w^ile-in^transmission  because  the  secret  key  is  known  only  to  the 
server. 

•  Now  client  and  server  have  new  keys  that  can  be  used  to  encrypt  the 
sensitive  data. 

•  The  server  sends  the  challenge  back  to  the  client  and  the  client 
validates  the  exchange. 


Ghent  sends  CLIENT_FINISHED: 

•    The  client  closes  out  the  handshake  by  sending  a  message  to  the 
server.  ^  ^ 

Server  sends  SERVER  FINISHE 
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Exhibit  IV-5 


The  server  closes  out  the  handshake  by  sending  a  message  to  the 
client. 


Payment  Process  ^or  Soft  Goods  Using  SSL 


Initiate  Transaction 


CLIENT_HELLO  (Challenge,  Cipher  Specs) 


SERVER_HELLO  (Server  Certificate,  Bulk  Cipher  Specs,  ConnectionJD) 


Verify  Server  Certificate,  Generate  Symmetric  Keys 


CLIENT_MASTER_KEY  ((Master  Keys)  Server_Public_Key) 


SERVER_VERIFY  ((Challenge)  Server_Private_Key 


Client  Authenticates  Server 


CLIENT_nNISHED  ((ConnectionJD)  Client_Write_Key) 


SERVER_FINISHED  ((New_Session_ID)  Server_Write_Key) 


Secure  HTTP  or  Other  Secure  Dialog 


Exchange  Record,  Such  As  Credit  Card  Data 


Source:  INPUT 


2.       Typical  Merchant 


Any  merchant  already  trading  todt^^sing  credit  cards  on  tfee^  own^eb  site 
is  likely  to  use  SSL. 


3.  Advantages 

Netscape  freely  offers  SSL  as  a  standard,  although  it  charges  for  its  secure 
server^henc§Ajt  has  become  very  widely  accepted.  There  is  no  per-^ 
transaction  cost  for  using  the  standard. 


SSL  can  secure  any  record,  not  just  HTTP. 

SSL  is  widely  deployed  in  vveb  servers^  which  means  that  merchants  can 
easily  secure  credit  card  anid  other  sensitive  data/. 
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4.  Disadvantages 

The  security  is  only  between  client  and  server,  not  for  complex  transactions 
involving  intermediaries. 

If  buyers  do  not  have  certificate^he  server  cannot  know  whether  they  are 
genuine,%nyone  can  steal  a  computer  with  a  user  ID  and  password  and 
pretend  to  be  someone  else  (for  that  matte^^hey  could  steal  a  computer  with 
a  certificate  in  it  if  it  was  not  protected  in  a  wallet!). 

Buyers  without  certificates  can  repudiate  the  message,  h^i^  the  merchant 
may  be  left  with  returned  inventory. 

Exported  browsers  currently  have  shorter  keys  than  domestic  U.S.  ones, 
making  them  unusable  for  secure  transactions  at  some  sites,  such  as  Wells 
Fargo  Bank. 

Unless  the  purchaser  is  a  frequent  visitor  to  an  SSL  site,  the  initial  form 
fiUin^sking  for  name,  address,  e-mail  address,  mother's  maiden  name,  etc., 
gets  tedious,  slowing  down  Internet  shopping. 


5.  Security 

The  key  exchange  described  above  did  not  authenticate  the  user,  as  the  user 
did  not  have  a  certificate.  The  protocol  does  allow  the  server  to  ask  the  user 
for  a  certificate.  However,  in  the  future,  the  server  will  ask  the  user  for  a 
certificate. 

Much  of  the  security  depends  on  the  quality  of  the^rtificate  authority  (CA). 
Supposing  an  entity  issued  false  certificates  and  pretended  tohe  VeriSign, 
this  would  be  a  major  fraud  that  would  render  the  protocol  insecure. 

Much  depends  on  the  way^SSL  is  implemented^  it  is  only  as  strong  as  its 
weakest  keys  and  algorithms.  With  a  reasonable  SSL  implementation  (good 
encryption  algorithms,  reliable  TCP/IP  network,  long  enough  key  lengths^ 
buyers  and  sellers  need  not  worry  about  eavesdroppers.  ^ 


6.       Market  Acceptance 

SSL  has  been  widely  accepted  by  ^b  server  vendors.  Thousands  of 
merchants  offer  SSL  servers  that  can  encrypt  credit  card  transactions  over 
the  Internet. 


7.       INPUT  Assessment 

SSL,  wttfl^  relatively  simple  mechanisnv^as  proven  useful  in  enabling 
credit  cardtransactions  over  the  Internet.  It  will  be  part  of  the  SET 
standard. 
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SSLritasJ^e^used  in  1995  and  1996  to  differentiate  ^eb  servers.  Users  pa^ 
a  premium  for  a  ^eb  server  that  supporraSSL.  |^ 

However,  SSL  is  becoming  a  commodity  that  will  no  longer  be  able  to 
command  a  higher  price.  With  the  advent  of  SET,  users  will  look  for  more 
capable  3sz:eb  server  features. 

On  the  client  side,  SSL  implementations  do  not  need  a  walle^the  user 
certificate,  if  there  is  one,  is  stored  with  the  browser.  Whenever  users 
encounter  an  SSL-enabled  browsey^hey  end  up  filling  in  forms  and 
answering  questions  about  the  site. 


The  merchant  does  not  usually  store  a  credit  card  number,  howesis^there  are 
exceptions. 

t 

Amazon.com,  the  bookstore  with  over million  books,  uses  a  Netscape 
Commerce  server  and  does  keep  credit  cards  on  file. 

The  user  may  be  spared  entering  credit  card  data  at  each  visit  to  the  store, 
but  Amazon.com  gets  many  of  its  book  reviews  entered  by  users. 

The  trend  is  toward^sers  entering  personal  information  for  SSL-enabled 
servers  that  can  then  be  used  for  tracking  down  system  abusers,  subsequent 
site  visit^nd  targeted  marketing. 

Open  Market,  with  OM-Transact  operational  at  Time- Warner,  MC^and  First 
Union  Bank,  was  the  first  vendor  to  provide  application  software  that  acts  as 
a  cash  register  for  processing  credit  card  and  other  transactions. 


The  attraction  of  Open  Market's  solution  is  that  it  separates  payment  from 
content,  so  a  merchant  can  keep  the  ^b  site  content,  whereas,  the  bank  can 
handle  payment  processing.  —  % 


Netscape  and  Microsoft  are  also  offering  Merchant  Systems,  serves  to 
process  merchant  payments.  These  servers  enable^hopping  carts  to  be  set 

up. 

Currentlyjnternet  shopping  jyebsit^^er  interfaces  range  from  superb,  as 
found  atS^ookstore ^ajnazon.coin,  to^omplex.  The  field  research  conducted  for 
this  project  indicates^that  the  majority  of  merchants  have  yet  to  implement 
shopping  carts. 
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Visa/Mastercard  kSET 


{ 


1.  Process 

SET  (Secure  Electronic  Transactions)  is  a  proposed  standard  from  Visa  and 
Mastercard  for  processing  credit  cards  over  the  Internet.  It  came  from  Visa's 
Secure  Transaction  Technology  (STT)  standard  and  Mastercard's  Secure 
Electronic  Payment  Protocol  (SEPP)  standard  in  February  1996. 

American  Express  announced\it  would  license  Microsoft's  SET_ 
implementation  in  the  first  half  of  1996.  (Additional  partners  include: 

^        >  ^ 


GTE 
IBM 

-^{icrosoft  ■ 

Netscape 

SAIC 

Terisa  Systems 
VeriSign 


Already^Internet  commerce  software  vendors,  like  RSA,  have  made 
significant  commitments  to  the  protocol. 

The  main  advantage  of  SET  over  SSL  is  that,  like  a  credit  card,  it  associates 
merchant  and  buyer  with  a  financial  institution  and  credit  card  company, 
providing  an  additional  degree  of  security. 

The  problem  with  SSL  is  that  the  transaction  is  unencrypted  at  the 
merchant  site  and  depends  on  the  merchant's  firewalls  and  other  security  to 
keep  it  safe  from  attack.  This  puts  the  bank  at  risk. 

SET  puts  the  onus  on  the  bank  or  card  processor  to  keep  the  transaction 
secure. 


>7 


By  early  1997,  SET  will  start  to  be  used  as  the  leading  standard  for  credit 
card  payments. 

Initially,  VeriFone  will  offer  SSL  between  the  browser  and  merchant  and 
SET  between  the  merchant  and  credit  card  acquirer  (acquiring  bank  or  credit 
card  processor),  thus  bridging  the  transition  to  full  SET  transactions. 

SET'S  goals  are: 

\      •    Provide  authentication  of  betfe^merchants  and  retailers 


•    Ensure  pajrment  integrity 
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•    Ensure  confidentiality  of  information 

In  addition,  SET  aims  to  comply  with  government  cryptography  restrictions. 

Signatures  follow  a  hierarchy  to  comply  with  regional  legislation.  Each 
signatory  has  two  sets  of  public/private  key  pairs,  a  Signature  Key  and  a 
Key-Exchange  Key.  The  public  keys  are  made  known  to  those  requiring 
ther^sing  Certificates  under  the  certification  hierarchy  illustrated  in 
Exhibit  lV-6. 


Exhibit  IV-6 


IICJ.!^  IllU&LiatCU  111 


Signature  Hierarchies  /or  SET 

Root  Signature 


jsociation 
ignature 

^e.g.  Visa  -itl 
1 


ojitical 
afure 

f  Visa  Europe 
i 


of  America  | 


The  public  key  of  the  root  of  the  Certificate  Authority  (CA)  hierarchy  will  be 
widely  distributed  as  part  of  the  SET  software  implementations..  The 
Association  will  verify  keys  for  the  ^ec^J^olitical  organization,  witere^one 
exists.  The  Issuer,  normally  a  bank,  will  issue  certificates  to  cardholders. 

The  SET  specification  includes  an  oi^ne  registration  procedure  for  existing 
credit  cardholders  and  merchants  in  which  they  use  software  to  generate 
their  key  pairs  and  ask  their  issuers  and  acquirers  to  create  certificates  for 
them. 


SET  is  a  standard  for  payment,  not  general  electronic  commerce.  Exhibit 
7  shows  diagramatically  how  order  and  payment  information  are  linked. 


IV- 
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Exhibit  IV-7 


Order  and  Payment  Information 


Order 
Information 
(01) 


Payment 
Instructions 
(PI) 


essage 


Mes 
piges 

sage 
tfor  PI 

Combined 

Cardholder 
Signs 

filature 

Source:  SET  and  INPUT 

The  SET  system  creates  separate  digests  of  the  order  and  payment 
information.  These  are  concatenated  to  make  a  combined  digest  that  is 
signed  by  the  purchaser  using  his  private  key. 

Any  person  who  possesses  one  component  of  the  message  and^essage  digest 
for  the  other  component  can  verify  the  dual  signature.  PossibiUties  are: 

•  Merchant  -  has  order  information  and  digest  for  payment  instructions 

-  can  fulfill  order  without  knowing  credit  card  numbers 

•  Acquirer  -  has  payment  instructions  and  digest  for  order  information 

-  can  process  credit  card  information  without  knowing  order  details 

Exhibit  IV-8  shows  aiagramatically  a  typical  transaction  flow  between 
cardholder,  merchant  and  payment  gateway  for  making  a  pajnnent  using 
SET.  7  ■ 
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Exhibit  IV-8 


Transaction  Flow^or  SET 


Authorization  Request 
Send  PI  and  Dual  Signature 

Authorization  Response 
Send  Capture  Token 

Capture  Request 
Include  Capture  Token 

Capture  Response 

Payment 
Gateway 


Source:  SET  and  INPUT 

The  first  SET  action  is  to  iijutiate  a  request  to  a  i^erchant.  The  merchant 
responds  with  a  copy  of  thei^ertificate  to  prove  are  genuine  and  as 
acknowledgment. 

The  payment  gateway  is  connected  to  the  existing  credit  card  verification 
system^  by  an  acquirer  who  uses  a  private  secure  network  to  carry 
transaction  information.  The  cardholder  encrypts  payment  instructions, 
using  the  public  key  of  the  payment  gateway  to  encrs^it  the  credit  card 
information  and  the  public  key  of  the  merchant  to  encrypt  the  order. 

The  encrypted  order,  payment  informatioi>\and  dual  signature  are  sent  to  the 
payment  gateway  by  the  merchant  for  verification. 

A  capture  token  comes  back  from  the  payment  gateway  to  the  merchant, 
analogous  to  the  authorization  code  familiar  to  credit  card  purchases.  A 
response  is  sent  on  to  the  cardholder. 

The  merchant  then  sends  the  purchase  request  with  the  capture  token  back 
to  the  payment  gateway ,4^fi^c^nbwledges  it. 

The  timing  of  sending  the  response  to  the  cardholder  from  the  merchant  may 
vary.  Some  will  want  authorization  fi-om  the  acquirer,  others  will  reply 
immediately  to  the  cardholder,  without  verification. 
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SET  allows  for  variations  in  the  basic  process,  which  resembles  that  of 
traditional  credit  card  processing. 

Mastercard  does  not  initially  intend  to  offer  cardholders  certificates, 
meaning  that  they  cannot  have  digitally  verifiable  signatures. 

Visa  will  require  cardholders  to  generate  their  own  keys  and  have  them 
certified  by  a  Visa  acquirer. 


GC  Tech  of  France  aims  to  be  a  European  CA.  [Visa  envisions  the  same, 
digital  signature  being  used  "on  the  net"  as  "on  the  streetfe"^  ^ 

In  reality,  there  will  be  multiple  CAs,  who  will  need  to  define  zones  of 
mutual  trust.  Candidate  CAs  are  VeriSign,  Visa,  NACHA,  the  ^J^Post 
Oftic^nd  CyberCash. 

2.  Typical  Merchant 

The  typical  merchant  will  be  an  existing  credit  card  merchant.  Some  new 
merchants  who  have  Internet^>^nly  businesses  will  emerge,  but  most 

merchants  will  have  "on  the  net"  and  "off  the  net"  presence? 

A 

3.  Advantages 

^'^^ponsored  by  leading  credit  card  companies,  software  companies,  acquirer^ \ 
^  andbanks^  'i-^-  -> 


/ses^amiliar  credit  card  processing  infrastructure. 

'"^  ^^^Stfi^iScation  of  both  buyer  and  seller  (Masteixard  will  not  authenticate  ~t^A_ 
buyer  initially  using  SET  digital  certificates).  ^ 

The  use  of  wallets  should  make  it  easier  to  create  smooth  and  eas3M;o-;^ 
navigate  user  interfaces,  as  well  as  transaction  logging  for  the  wallet  owner. 

^^•.^    Disadvantages         ^.^J^L.  it  Ji^  ^  ' 

^  Unsuitable  for  low^ost  item%i*osts  30  cents  to  process  a  transaction,  2*^  6% 
fee  for  merchants.  ^  f  h'"^ 


5.  Security 

SET  provides  noQfrepudiation  of  consumers  and  blinding  of  merchants  to 
credit  card  information. 

It  is  considered  superior  to  SSL  because  it  links  the  merchant  to  a  payment 
processor  and  the  merchant  does  not  handle  credit  card  numbers. 
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CyberCash's  pioneering  system  is  not  open,  but  will  move  to  SET. 

Initially  setting  up  certificates  with  a  user  and  a  merchant  can  be  tedious, 
but  the  process  is  expected  to  accelerate  as  companies  set  up  customer 

service  representatives  thaccan. handle  Internet  transactions. 

A  J- 

6.  Market  Acceptance  ^ 

Visa  and  Mastercard  claim  over  800  rnillion  pardhoJ''^PT:s,  worldwide.  Th^ 

standard  is  expected  to  be  widely  impremferited.6y  yeaf^^na  1996.  ^  \ 

A  ^  

A  reference  implementation  of  SET  is  available  free  of  charge  to  vendors. 
Mastercard  and  Visa  provide  considerable  support  on  their  jH^eb  sites  for  the 
standard.  / 

The  goal  of  SET  is  to  be  in  operation  for  Christmas  1996.  Whereas  this  may 
happen  for  a  few  sites,  widespread  deployment  is  more  likely  by  Christmas 
1997.   

^  Wide  adoption  by  the  industrj^a  few  participants  are  listed  below: 

•  Credit  card  companies^  -  Visa,  Mastercard,  American  Express, 
Discover^_j,__ 

•  Server  software  vendors  -  Netscape,  Microsoft,  O'Reilly,  Oracle_-e__ 

•  Systems  vendors  -  IBM,  Sun,  Silicon  Graphics,  Digital^ompaq^-^2^ — 

•  Commerce  application  companies  -  Open  Market,  Connect, 
Broadvision^_j2__ 

•  Point-of-sale  vendors  -  VeriFone,  IC Verify  

7.  INPUT  Assessment  " 

^^;^2*^^re  likely  to  evolve  like  the  bank  ATM  networks,  Cirrus  and  Plus.  The5r'^ 
started  out  by  working  with  a  few  bank^b«^ventually  more  banks  became 
connected  and  they  connected  to  overseas  networks  like  I^JI^based  Link. 

This  then  enables  international  funds  transfers  to  be  made  rapidly. 
International  Internet  payments  will  be  facilitated  by  agreements  and 
network  interfaces  between  CAs. 

/  \^ 
(|CAs  will  require  the  highest  levels  of  security  and^e  targets  for  intruders 

and  hackers. 
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It  is  desirable  that  there  be  more  than  one  CA  per  country  and  that  data  be 
distributed  and  secured  with  data  recovery  systems.  Security  will  have  to  be 
at  least  as  high  as  that  offered  by  a  bank. 

How  consumers  will  store  their  certificates  is  an  open  issue.  Wallets  have 
been  proposed,  but  these  are  inconvenient  if  they  stay  on  a  desktop 
computer. 

General  Magic  and  Sony  have  announced  home  banking  on  a  PDA.  One 
scenario  is  that  the  wallet  is  encoded  in  a  smart  card  that  can  be  read  by  a 
PC,  but  then  the  advantage  of  having  a  wallet  encoded  in  data  only 
disappears. 

Specialized  electronic  organizers  that  pay  checks  are  starting  to  appeal^) 
^»^l^^hese  will  evolve  into  wallets.  Telephones  could  also  hold  wallets. 

The  most  likely  scenario  is  to  store  the  wallet  information  in  a  card  or 
organizer  that  can  be  transmitted  to  a  PC  with  a  simple  connection,  such  as 
an  infrared  link. 

Initiallyycards  will  be  for  a  single  CA;  then  a  bank  or  other  service  institution 
could  consolidate  multiple  consumer  identities  on  a  single  card. 

Banks  are  already  offering  Visa  debit  cards  and  ATM  cards  on  one  piece  of 
lastic.  so  the  trend  toward^  putting  multiple  identities  on  a  card  is-already 
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Wallet  software  is  already  available  for  paying  bills  through  EFT  from 
Intuit.  The  Quicken  Financial  Network  is  Intuit's  private  network  for  bill 
paying.  Intuit  uses  1024-bit  public  key  encryption  from  RSA. 

^Wheredr^ying  regular  bills  is  a  different  process  from  shopping,  ^^vhere  bill  " '  jT)  ^ 
payments'are  less  regulas  ultimately  the  consumer  may  want  one  wallet.  i.  <v 

As  Intuit  battles  Microsoft  in  the  consuinerjinancial  soitwar&jnflarket,  it  is  ^ 
still  an  open  issue  whether  Quicken  Financial  Network  will  be  a  dark  horse 
in  the  payment  area  and  compete  with  CyberCash  and  VeriFone. 

It  is  expected  that  transaction  logs  from  SET  wallets  will  be  able  to  operate 
with  Quicken  and  other  financial  management  software,  just  as  Quicken 
interfaces  to  bank  and  credit  card  accounts. 

Credit  cards  will  be  the  predominant  form  of  payment,  for  both  consumers 
and  businesses,  for  occasional  purchases  over  $10. 

Competition  fi"om  micropayment  schemes  for  this  type  of  purchase  will  be 
slow  in  coming  because  the  infi-astructure  is  alreadyinplaee^^orcredit  card 
processing.  \ 
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Merchants  will  be  afraid 
there  are  several  options 


id  to  move  to  new^r  micropayment  schemes  as  long  as 
ns,  for  fear  the^picl^the  wrong  standard. 


FSTC  checks  may  offer  competition^  1998,  but  like  the  competition 
between  credit  cards  and  travelers'checks,  SET  is  likely  to  win. 


Checklist  for  Payment  Methods 


Any  pajnnent  system  can  be  measured  against  the  following  desirable 
features: 

•  A  store  of  value 

-  heavy  cash  is  less  convenient  than  a  plastic  card 

-  for  computer  user^  card  may  be  less  convenient  than  storing 
data  on  the  computer  disk 

•  Wide  acceptance 

-  national  currencies  are  becoming  obsolete  as  credit  cards  become 
globally  accepted 

•  Low  cost,  easy  user  interface 
^Tljti^achines  prove  too  difficult  for  some  users,  like  the  elderly 


•  Automatic  data  capture  and  aggregationjTj^ 

-  some  users  want  anonymity 

-  some  countries  h^^the^U^.  make  extensive  use  of  credit  card 
dat^n  othei^^^s  iflegar 

•  ^nsur^^^  transaction  is  satisfactorj^f^ 

-  both  user  and  merchant  must  be  satisfied  each  is  genuine 

-  users  must  have  the  funds,  merchants  must  be  able  to  deliver  the 
goods 

-  beyond  individual  transaction^-^-  currencies  need    be  backed  up 
by  assets,  banks  need  reserves',  new  payment  schemes  also  need-t^ 
be  solvent 
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Insurance  against  loss  or  thefl^ 

-  some  forms  of  payment  like  ^ravelers  ^hecks  can  be  replacec^ 
others  cannot  b^some  have  limits 

-  besides  insuring  the  payment  vehicle,  a  card  issuer  may  choose  to 
provide  some  insurance  against  bad  purchases  or  unsatisfactory 
transactions 

Line  of  creditj^|^ 

-  Prices  of  obtaining  a  line  of  credit  may  vary  under  different 
schemes 

\ 

On-demand  convertibility  to  other  payment  systems^ 

-  credit  card  issuers  may  offer  cash  withdrawal  at  ATMs  for  a  fee 

-  exchanging  cash  may  be  harder  than  using  a  credit  card  in  a 
foreign  land 

-  the  Internet  potentially  threatens  national  currencies  and 
economies  as  global  buyers  and  sellers  emerge 


Privac 


-  some  transactions  are  totally  anonymous,  like  cash  and  some 
forms  of  digital  cash 

•    Settlement  and  clearing  timejTf^ 

-  the  purchaser  likes  to  use  the  float 

-  merchants  like  to  be  paid  fast 

No  In^payment  method  offers  all  the  above  features.  Trade-offs  have  to  be 
made.cuyers  and  sellers  may  have  incompatible  requirements,  for  example 
regarding  ideal  settlement  and  clearing  time. 

Exhibit  IV-9  provides  a  comparison  of  how  emerging  payment  methods 
compare  with  the  features  listed  above.  The  exhibit  columns  are  split  across 
several  pages  and  the  first  column  of  each  table  on  each  page  is  the  same. 
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Exhibit  IV-9 

Feature  Comparison  of  Payment  Methodologies 


Feature 

Cyberoash  Coin 

Digicasn  -  ccasn 

rirsT  vinuai 

Stored  value 

No,  instruction  to  pay 

Yes 

No,  instruction  to  pay 

Wide  acceptance 

/ 

Yes,  likely  leverage  through 
partners 

No,  both  parties  .must  use  the  same  bank, 
-teday^annot  be  passed  on  to  third 
partie^ECash  can  only  be  used  for  one 
transaction. 

No,  Internet  only 

"~TT  

EasefoNuse 

Yes,  wallet  simplifies  buying 

Fair,  us^r  has  to  keep  track  of  transactions 
and  pr^ay  for  ECash  from  a  bank 

Poor 

Data  capture 

Yes,  wallet  log  and  CyberCash 

No,  software  has  a  local  log,  but  user  is 
responsible  for  aggregating  and 
safekeeping  of  the  log 

Yes,  credit  card 
statement 

Satisfactory 
transactions 

Uncleai^for  lowA^alue  items  it 
may  not  matter 

No,  as  with  real  cash 

Yes  for  buyer,  no  for 
seller 

Insured  against 
loss 

Yes,  CyberCash  keeps  log 

No,  unless  user  backs  up  disk.  One  can 
get  a  refund  if  the  seed  number  for  coin 
serial  numbers  is  presented  to  the  bank. 

Credit  card  risk  $50 

Line  of  credit 

No,  coin  is  prefpaid 

No 

Yes,  25-30  days  to 
pay 

Convertible  to 
other  systems 

Coin  can  go  into  checking 
account 

Yes,  for  a  fee^an  be  deposited  into  a 
checking  account 

No 

Privacy 

Merchant  does  not  know  buyer, 
but  CyberCash  does 

Yes  for  consuni^^no  for  merchant.  Pay^r 
can  prove  who  b^paid.  Received  ECash 
has  to  be  deposited  into  a  bank. 

No,  FV  knows  details 

Quick  clearing 

Fair,  next  banking  day  for 
consumer,  possibly  for 
merchants,  more  likely  2-3  days 
for  merchants 

Yes,  it  is  pr^aid.  Merchant  gets  paid  at 
time  of  deposit 

No,  seller  may  wait  30 
days 

Source:  INPUT- 
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Exhibit  IV-9  cont. 

Feature  Comparison  of  Payment  Methodologies  (cont.) 


Feature 

FSTC  E-check 

Mondex 

Stored  value 

No,  instruction  to  pay 

Yes 

Wide  acceptance 

No,  requires  banking  network,  POS  investments 
and  consumer  card  readers  or  w/allets 

Potentially  it  could  be  used  for  peer-to-peer 
payments 

Likely,  but  not  yet_J — 

Today  both  parties  must  use  the  same  bank,  but  in 
the  future  it  will  become  globa|^^upporting  $  -^0^ 
currencies  in  one  card-.._n^  '  ' 

Can  be  passed  to  third  parties,^*^ 

EaseToffuse 

If  card  issuing  is  easy,  then  as  simple  to  use  as  a 
credit/debit  card_>^_ 

Processors  could  reduce  paper  handling  costs 
significantly — » — - 

Wide  range  of  devices  supported  with  appropriate 
modifications  -  ATMs,  smart  phones,  POS  card 
readers,  PC  card  reader%^_^ 

Data  capture 

Yes,  at  POS  or  in  PC.  Bank  statement  could  show 
full  check  details. 

10  transactions  are  saved  in  the  card,  user  is 
responsible  for  capturing  more  details  from  PC 
software  or  a  wallet  log  

Satisfactory 
transactions 

No,  depends  on  same  critena  as  paper  check* 
verification  of  funds  is  neededoi — - 

No,  this  IS  cash  and  depends  on  merchant  s  return 
policy—jK^-- 

Insured  against 
loss 

Not  needed,  as  check  can  be  rewritten  and  it  is 
less  subject  to  fraud  than  paper  checks,^_j^ 

No,  the  wallet  enables  users  to  store  higher  value 
amounts  ther^he  card  is  intended  for  small 
amounts_id^ 

Line  of  credit 

Depends  on  bank  account_> — 

No 

Convertible  to 
other  systems 

Yes,  can  be  converted  to  cash  at  a  bankoL^ 

Yes,  can  be  deposited  into  a  checking  account 

Privacy 

No,  bank  will  have  transaction  record,  rather  than 
just  those  over  $300  as  now_A_^ 

3- 

Some^can  be  passed  on  to^hird  party.  Seller  has 
complete  records. 

Quick  clearing 

No,  payee  has  to  deposit  before  it  can  clear,  plus  1 
or  2  days  settlement_<_^ 

Yes,  this  is  cash.-_<___ 

Source:  INPUT-j 
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Exhibit  IV-9  cont. 

Feature  Comparison  of  Payment  Methodologies  (cont.) 


Feature 

SET  Credit  Card 

SSL 

Visa  Australian  Trial 

Stored  value 

No,  instruction  to  pay 

No,  instruction  to  pay 

Yes 

Wide  acceptance 

/ 

Yes,  700  million  Visa  and  MC 
card  holders,  plus  purchasing 
9^rds  in  corporations 

Fair,  only  on  Internet 

Yes,  large  installed  base  that 
can  be  persuaded  to  upgrade 

Not  for  peer-to-peer 

■"f  

Easelof^use 

Yes,  wallet  standards 

Fair,  user  may  tire  of  forms 

Yes,  can  use  at  ATMs  and  POS5 

Data  capture 

Yes,  wallet  log  and  credit  card 
siai6rncni 

Yes,  user  captures  data 

All  transactions  captured  S-e— 
flnnrpnatpH  at  r^nlnt  of  nurcha^p 

Satisfactory 
transactions 

Merchant  is  guaranteed  funds  if 
signed,  authorized  transactioijii^ 

OUrioUllicr  lo  UaC/fVCU  Uy  L>iCUIL 

card  company 

Yes  for  buyer,  no  for  seller 

No,  this  is  cash,  depends  on 
merchant  return  policy 

Insured  against 
loss 

Yes,  like  credit  card  $50  max  risk 

Credit  card  risk  $50 

Yes,  like  travelers  checks 

1  inp  nf  rrpHit 

Yp<*  P^-^^n  riflv^  likp  rrpdit  rarri 

Yes  25-30  davs  like  credit  card 

No 

Convertible  to 
other  systems 

No,  except  for  highy^ee  cash 
advance.  Convertible  worldwide 
into  other  currencies. 

No 

Yes,  can  be  deposited  into  a 
checking  account 

Privacy 

No,  merchant  and  transaction 
processor  have  information  on 
buying  patterns 

No,  merchant  sees  details 

No 

Quick  clearing 

Fair,  merchant  paid  in  2-3  days 

Fair,  merchant  paid  in  2-3  days 

Yes,  this  is  cash 

Source:  INPUTS 
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User  Awareness 


A    

What  Users  Want  from  ^  Payment  System 

1.        What  Do  Businesses  Prefer  Jn  A^Pajmieiit  System? 

In  early  Mondex  cash  card  trials,  merchants  in  Swindon(5_;(U.K.)^^joyed 
using  the  system  because  handling  electronic  data  cost  less  than  handling 
cash  or  checks.  Merchants  also  like  to  get  paid  fast.  Giving  a  merchant 
instant  credit  is  an  advantage  over  othejpv^lower  payment  methods. 

Digital  signatures  and  other  security  features  are  attractive  to  merchants 
who  are  victims  of  bounced  checks,  false  signaturei^and  fake  currency. 

Exhibit  V-1  indicates  what  businesses  prefer  in  a  pa5rment  system. 


Exhibit  V-1 

Business  Reasons  for  Preferring  a  Payment  System 


Lower 
Costs 

Timing 

Lower 
Risks 

More  Data 

1        1        1        1        1  1 
0       20      40      60      80  100 
Percentage  of  Businesses  Mentioning~f%)L^ 

Source:  INPUT 
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Exhibit 


7^ 


2.       What  Business  Thinks  Consumers  Want 

input's  market  survey,  conducted  in  the  ■is  rnnaidpredQjjL 

less  of  a  concem-than  in  Europe^requested  businesses  to  identify  what  they 
beheved  consumers  wanted.  The  results  are  shown  in  Exhibit  V-2. 

Safety  and  foolproof  operation  are  uppermost.  This  is  why  banks  are  very 
cautious  about  exposing  their  risk  by  putting  too  much  cash  into  a  cash  card. 
V  Any  adverse  publicity^bout  hackers,  security  breache^jpr  unreliable  systemsJj,^ 
I    causes  loss  of  consumer  confidence  in  the  banking  system.  ' 

Convenience  is  the  next  requirement,  hence  the  preference  for  convenient 
credit  card-sized  smart  cards  by  banks. 

Businesses  think  that  consumers  are  less  interested  in  privacy  and 
accountability.  This  survey  was  ma^y  done  in  the  U.S./>^here  privacy  is 
less  of  a  concern  than  in  Europe.  ^ 


Desirable  Consumer  Features 


Safe  and 
Foolproof 

Convenience 
Accountability 
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42 


Privacy 


17 


0  20         40         60         80  100 

Percentage  of  Businesses  Mentioning 


Source:  INPUT 


3.       Which  Payment  Systems  Will  Businesses  Prefer? 

Exhibit  V-3  shows  use  and  planned  use  of  different  payment  systems  by 
business?^ 

A 
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As  mentioned  earlier,  90%  of  businesses  plan  to  use  J^urchasing  ^ards.  This 
is  the  most  widespread  payment  option  in  terms  of  percentage  of  businesses 
penetrated. 

Financial  EDI  (FEDI)  is  used  by  84%  of  companies  and  a  somewhat  lower 
percentage  either  use  or  plan  to  use  EDI  over  the  Internet. 

It  is  not  surprising  that  only  50%  of  businesses  plan  to  use  smart  card^s 
they  are  most  likely  to  be  used  by  retailers,  banks^and  consumers  initially. 

SET,  for  sending  credit  card  payment  over  network^s  only  planned  by  40% 
of  businesses,  but  this  is  likely  to  increase  as  products  that  use  the  standard 
become  available. 


Electronic  checks  were  not  seen  as  useful^  for  or^30%  of  businesses  used  or 
planned^to  use^h^^..  Mapy  businesses  pro:fero^[a  preference  for  paper 
checks  a^^e^upportthe^  b^i^^ess  processes  and  provide  a  permanent 
transaction  record  when  they  are  returned. 


Exhibit  V-3 


Planned  and  Current  Use      Payment  Methods 


Use  Purchasing  Cards 


Use  FEDI 


Use/Plan  Internet  EDI 


Use/Plan  Smart  Cards 


Use/Plan  SET 


Use/Plan  E-Check 


20  40  60  80 

Percentage  of  Businesses  Mentioning  ^%)i<>^ 


100 


Source:  INPUT-— 
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4.       Desirable  Consumer  Services 

Businesses  were  as^ed  to  commoH'^oii^w^ta^ervices  they  thought  consumers  would  use.  Bill 
Vpresentment  to  deposit  money  in  a  bank  w&s  seen  as  less  desirable  for  consumers.  Electronic 
checks  did  not  rankfiighly,  with  only  8%  of  businesses  thinking  that  consumers  would  find  ^ 
/  checks  desirable. 

(  ' 

\   Exhibit  V-4  shows  tl%t  account  balancing  arid  billing  inquiries  were  the  most  useful. 


Exhibit  V-4 


Desirable  Consumer  Services ^rom  ^Business  Perspective 


Account  Balance 


Billing  Inquiry 


Bill  Presentment 


E-Check 


8 


0  20  40  60  80  100 

Percentage  of  Businesses  Mentioning 


Source:  INPUT^  ^ 

5.       How  Will  New  Purchasing  Methods  Affect  Payment  Timing? 

Exhibit  V-5  shows  how  businesses  think  electronic  payment  methods  will 
affect  the  timing  of  payments.  Most  think  they  will  get  paid  faster,  which  is 
true  with  some  of  the  electronic  cash  schemes  compared  with  credit  card 
payments. 

Almost  half  (44%)  think  they  will  be  able  to  pay  their  bills  faster.  Some 
think  payment  will  be  slower.  Some  think  that  using  credit  cards  instead  of 
checks  will  give  them  more  time  to  pay. 
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Exhibit  V-5 


How  New  Purchasing  Methods  Will  Affect  Payment  Timing 


Get  Paid 
Faster 

Pay  Faster 
Pay  Slower 


0  20         40         60  80 

Percentage  of  Businesses  Mentioning 


Source:  INPUT 


B 


Purchasing  Cards 


Are  Purchasing  Cards  Prevalent? 

Toduced  only^^^ears  ago,  Visa  and  Mastergard  estim^e  :^|i^^arly  100% 
of  the  Fortune  100  and  60%  of  businesses  with  over  $10^^'in  revenue  will 

have  some  Purchasing  Card  (Pcard)  program  in  place  bj/year  end  1996. 

 yr^  — ^ 

Companies  are  adopting  Pcards  to  reduce  the  cost  of  making  a  small 
purchase.  The  typical  purchasing  process  costs  between  $20  and  $80  per 
transaction  in  administ^tive  resoi^ces^'often  more  than  the  value  of  the 
goods  being  purchase(^tt^^§Tp:fees: 


•  Requisition 

•  Approval 

•  Purchase  Order 

•  Ship  Receipt 

•  Invoice 

•  ^Way  Match 
Check  Sending 
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Credit  card  companies  can  deliver  timely  reports  on  Pcard  purchases,  saving 
users  clerical  work.  Pcards  enable  Internet  commerce  for  businesses.  There 
is  no  need  for  a  buyer  to  set  up  a  purchasing  relationship  or  establish  trade 
credit. 

Credit  cards  are  unsuitable  for  most  primary  commerce  purchases^^  where 
long-term  supply  contracts  will  continue  to  predominate.  Pcards  are  likely  to 
be  used  for  purchasing: 


Software 

PCs  -  when  not  part  of  a  bulk  order 
Office  supplies 
Copiers  and  related  servicing 
Laboratory  components  -  in  small  quantities 
Medical  supplies 
Miscellaneous  equipment  parts 
Books 
Information 


17 

It  is  likely  that  Web  sites  selling  to  business'will  offer  on^ne  payment  by 
credit  card  routinely  in  1997.  ^  / 

Exhibit  V-6  shows  the  survey  result  that  only  10%  of  businesses  do  not  use 
some  kind  of  credit  or  other  purchasing  jCard.  This  is  somewhat  higher  than 
Visa  and  Mastercard  estimates.  ^ 


Exhibit  V-6 


r 

Percentage      Businesses  Using    Purchasing  Card 


Source:  INPUT 
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Exhibit  V-7  shows  how  businesses  rank  perceived  benefits  of  a  purchasing 
card  program. 

Their  main  interest  is  in  reducing  procurement  costs.  Spending  hmits  are 
typically  set  per  month  and  per  transaction. 

Larger  volume  businesses  typically  have  no  fee  and  receive  up  to  30  days 
credit. 

Accounting  departments  can  aggregate  the  entire  amount  on  a  card  and  rely 
on  reports  produced  by  the  credit  card  company  for  account  details.  For 
companies  that  want  more  detailed  reporting  (Level  2  or  Level  3  POS  detail), 
electronic  accounting  information  is  available  in  most  cases. 

Purchasing  card  programs  can  improve  employee  morale  by  making  them 
feel  more  in  control  and  in  charge  of  their  own  small  purchases. 

Purchasing  cards  enable  employees  to  participate  in  Internet  commerce  from 
their  workplace.  Purchasing  cards  should  simplify  acceptance  of  Internet 
commerce  in  business.  .  . 

Methods  that  support  e;:ebecks  and  POs  will  laglSET  credit  card  payment 
systems  by  about  a  ye^ln  their  deployment  to  most  businesses. 


2.       Purchasing  Card  Transaction  Amounts 

Exhibit  V-8  shows  the  percentage  of  respondents,  ^mBithose  using 
Purchasing  (^ards,  that  used  their  cards  for  different  anioimtsofpm;^^ 
''^under  $100.  "  ==5- 
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Amount  of  Purchase  Using  Purchasing  Cards 


10  20  30  40  50 

Percentage  of  Respondents~t%)-^^='^— ^ 


60 


,  Source:  h 

Almost  none/  (2%)  only  used  them  for  purchased  over  $100.  Most 
respondents  (54%)  had  between  50%  and75%  oftKeirtransactions  under 
$100.  ^  ^==^ 

Only  4%  had  less  than  25%  of  their  purchasing  card  transactions  under 
$100.  Roughly  (6n%thirdjjf  the  respondents  had  greater  than(50%. of  their 
transactions  to  purchas^^er  $100  amounts. 

Purchase  cards  are  not  just  for  small  transactions,  hence  moves  by  Visa  and 
Mastercard  to  raise  purchasing  limits  on  corporate  cards. 


11 


3. 


transactions 


Purchasing  Cards  For  Maintenance,  Repai^and  Office 
Transactions   \^J^  ) 

Given  tha^^  company-h^^efined  small  Maintenance^^^ep^ir. 

)ns  that  canlbe  made  on  purchasing  Eards^j^vmaTpfa 
transactions  are  actually  made  using  tfeeia^  |pea-Axio. . 

Exhibit  V-8  shows  wbf^percentag^j&f-MRQ  purchasee-were-made-itaing--^-— - 
'^urcha8iag4^a£d»^_The  majority  (58'^)  of  respondents  used  their  cards  for 
20-40%  of  MRO  transactions. 
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Exhibit  V-8 


No  respondent  used  purchasing  ^ards  for  all4beS^  MR0  transactions,  but 
18^0  said  they  used  them  for  40-60%  of  MRO  transactions. 

Whereas  office  and  maintenance  expenses  are  paid  for  by  {Purchasing  c4rds^ 
in  some  instances,  other  options  Uke  purchase  orders  are  Hkely  to  remain. 

^Amowt^of  Purchase  ^Using  Purchasing  Cards  


A 


20-40% 


<20% 


40-60% 


0  10  20  30  40  50  60 

Percentage  of  Businesses  Mentioning \%}-'^ — 


Source:  INPUT 


4.       Purchasing  Card  Use ^or  Capital  Expenditures 

Exhibit  V-9  shows  the  percentage  of  respondents  (32%)  that  allowed  the  use 
ofpurchasing^ards  for  capital  assets. 


©  1997  by  INPUT.  Reproduction  Prohibited. 


EEA6 


ELECTRONIC  PAYMENT  METHODOLOGIES 


INPUT 


Exhibit  V-9 


Can  Capital  Assets  Be  Purchased  Using  ^  Purchasing  Card? 


No,  Cannot 
Purchase 
Capital  Assets 
68% 


Yes,  Can 
Purchase 
Capital  Assets 
32% 


Source:  INPUT 

It  is  not  surprising  that  purchasing  Cards  are  used  for  purchase  of  capital 
assets,  by  onlyi/S^  organizations,  given  that: 

•  Many  organizations  have  different  budgetary  cycles  and  signing 
authorities  for  capital  expenditures. 

•  Capital  budgets  may  have  to  be  planned  as  much  as  a  year  in  advance. 

•  Purchasing  ^ards  are  unsuitable  for  capital  expenditures  when  lon^term 
contracts  with  suppliers  are  in  place  or  bulk  purchases  of  items  like 
computer  equipment  are  made  by  a  central  organization. 

i 

5.       Purchasing  Card  Use      Size  Business 

Exhibit  V-10  shows  the  use  ofj^urchasing  (Cards  by  company  size. 
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Exhibit  V-10 
^ 


Purchasing  Card  Use      Business  Size 


>$100M 

CO 

w 

15  $20M-$100M 

C 

<$20M 

( 

1 —   1      1      1      1  1 

3         20         40         60         80  100 

Percentage  of  Businesses  In  Each  Size  Range  Mentioning 

Source:  INPUT 


Overalj^90%  of  businesses ^sea  Purchasing  Cards.  Almost  all  (99%)  large 
companies,  with  over  $10C^'in  annual  sal^,  use  j'urchasing  jZards.  if^''(\uL, 
small  businessesVwttMless  than  $2^4!'tWsample  size  was  small,  but  only 
1%  use^l^urchasing  (Cards. 


Individual  credit  card  use  is  more  likely  in  very  small  businesses,  with 
reimbursement  after  the  individual  has  paid. 

6.        Barriers  1^  Using  Purchasing  Cards 

Exhibit  V-11  shows  the  perceived  barriers  to  using ^E^urchasing^ards. 
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Exhibit  V-1 1 


Barriers  To  Using  Purchasing  Cards 


Loss  of  spending 
controls 


Loss  of  GL 
accounting  details 

Lack  of  business 
manager 


Hard  to  change 
habits 


3.1 


Rating  (l^nimportant 


5 


The 


concern  is  loss  of  control  over  spending.  In  some  corporation^ 
accounting  departments  want  to  account  for  every  pennj^  other  cultures  do 
not^(?cd^^amicromanage|^^r  axamplo^K^  many  laser  toner  cartridges  we 
purchased.  '  ^ 


Source:  INPUT 


were 


Calculating  sales  tax  is  a  burden  for  some  accountants  if  items  are  not 
accounted  for  individually. 

If  only  merchant  name  and  totals  are  captured  with  Level  1  reporting,  then 
sales  tax  can  only  be  estimated  and  exempt  ite^s  such  as  services  and  food 
(in  some  states)  may  be  accounted  for  wron^^^  ^ 


% 

With  a  purchasing  card  prograir)^a  corporation  pays  a  bank,  rather  than 
many  smaller  institutions. 


Whereas  companies  can  delay  payment  to  a  few  small  suppliers,  they  find  it 
hard  to  do  ^^with  their  credit  card  issuer.  This  may  cause  cash-strapped  j 
companies  -from  encourajgingl^urchasing  <6ard  use.  ^ 
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Manageme^  resistance  to  using  Purchasing  Cards/  stems  fromih^losing 
control,  ^s^^enhacvehudget  numbers  attached  that  belong  to  mdividual 
departments;  whereas  purchasing  Cards  may  not  track  spending  to  the 
departmental  unit. 

Managers  are  also  afraid  of  changing  their  habits.  Many  prefer^the 
purchasing  department -intake  care  of  buying  items,  rather  than  burdening 
their  own  secretaries  or  themselves  with  the  chore. 

Companies  with  well-designed  oi^^ne  requisition  purchases  that  send  e- 
forms  to  the  purchasing  department  may  be  reluctant  to  supply  purchasing 
cards  to  many  employees. 

Card  limits  are  another  barrier  to  the  use  of  purchasing  c^|.  Ifmultiple 
cards  are  issued  for  an  accoun^t  is  sometimes  difficult  to  una^staHd  when 
the  credit  limit  is  reached.  ^ 

c   

Use  0f  Jhe  Internet  and  World  Wide  Web 

1.       Pros  and  Cons  of  Internet-based  Payments 

Exhibit  V-12  shows  the  benefits  businesses  perceive  of  using  the  Internet  for 
paymen^^n  a  scale  of  1  to  5,  1  being  unimportant  and  5  being  very 
important. 

^  ^    VAN  per^ransaction  pricing  schemes^  make  the  Internet  appear  attractive  for 
"some^businesses^that  use  EDI.  Businesses  without  EDI  expect  that  the  ^eb 
will  enable  them  to  buy  with  more  choice,  ease,^ee^nd  at  lower 
administrative  cost.  v 

If  Internet  checks  had  sam^^ight  clearing  this  could  provide  businesses  with 
an  opportunity  to  provide  a  trade  discount.  Increased  processing  speed  could 
also  help  businesses  pay  faster,  increasing  customer  satisfaction  and 
goodwill. 
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Exhibit  V- 12 


Benefits  Of  ^Internet  For  Business-to-Business  Payments 


Reduce  VAN 
costs/dependenciy 

Expand  electronic 
trading  partners 

Reduce 
procurement  costs 

Increase  speed  for 
better  discounts 

Increase  speed  for 
customer 


Rating  (i;jJnimportantr5^ery  Important) 


Source:  INPUT 

Exhibit  V-13  shows  that  lack  of  security  and  loss  of  float  are  the  two 
concerns  businesses  mentioned. 

The  survey  results  showed  little  awareness  of  security  schemegj^uch  as  the 
SET  protocol  for  credit  card  payment  over  the  InternejA^mong4ts~^-|^v^ 
respondents.  There  was  also  little  awareness  of  comrnerce  transaction 
systems  from  companies  like  Broadvision,  Open  Marke^and  Connect. 
Instea^ear  of  security  breaches  was  prevalent  among  respondents. 

Businesses  also  indicated  that  they  would  miss  the  float  associated  with 
paper  checks. 
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Exhibit  V-1 3 

A 


Barriers  to  Internet  Acceptance  for^  Business-to-Business 

^  ^  Payments 


Lack  of 
security 


Loss  of  float 


Rating  (ftlnimportant,  S-Very  Important) 


Source:  INPUT 


Exhibit  V-14  shows  the  benefiti'^usinesses-s^  of  the  Internet  for  consumer- 


toKbusiness  pajnnents. 


/V 


'-eeHipa^^lpro 


Over  50%  of  companies  were  planning  to  sell  some  of  their  ^empa^products 
over  the  WWW  by  mid-1997.  Even  businesses  selling  expensive  capital  goods 
were  interested  in  using  the  ^eb  to  sell  replacement  parts,  upgrade^and 
supplies. 

The  lowest  interest  in  Internet  jdommerce  was  found  in  the  wholesale 
grocery  industry,  a  segment  threatened  by  improved  distribution.  This 
industry  has  already  invested  in  inventory  replenishment,  electronic  links  to 
customer^nd  automatic  handling  system^and  does  not  see  additional 
advantages  to  be  gained  from  the  Internet.' 

Increasing  sales  is  the  main  reason  that  businesses  are  interested  in  the 
^b. 

£^ 

Improving  cash  flovs^by  reducing  order  processing  time  is  attractive.  The 
Internet  promises  to  change  the  "net  30  day"  payment  terms  to  "ship  within 
48  hours  after  credit  card  verificatiorte\The  faster  settlement  time  for  credit 
card  payments  makes  it  worth  the  2%  merchants  have  to  pa^n  many  cases. 

Non-EDI  users  were  particularly  interested  in  the  Internet  for  reducing 
paper  processing  and  phone  order  taking  costs. 


Integrating  accounting  systems  with  ^eb  sites  was  of  considerable  interest. 
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Benefits  C^f  Internet  For  Consumer-to-Business  Payments 


Source:  INPUT 


The  survey  results  shown  in  Exhibit  V-1^  indicate  why  merchants  are 
reluctant  to  accept  Internet-based  payments. 

Security  is  once  again  uppermost.  System  costs  and  lack  of  standards  were 
also  concerns. 

When  INPUT  probed  merchants  who  were  the  most  Internet  savvy,  they 
believed  that  payment  systems  that  relied  on  software,  rather  than 
hardware  like  wallets  and  Mondex  cards,  cost  less  to  implement. 

Merchants,  unlike  some  banks,  were  prepared  to  accept  the  greater  security 
risks  of  a  software  system.  Credit  card  transactions  with  SET  were  felt  to  be 
secure  enough. 

For  all  the  payment  systems,  lack  of  standards  was  a  concern. 

For  check  truncation,  large  billers  are  waiting  to  see  if  FSTC,  NACHA, 
ECCO  or  the  Federal  Reserve  will  set  the  standard's  they  all  have 
different  ways  to  capture  and  process  check  images4t  the  point  of  payment. 

Large  billers  have  made  considerable  investments  in  check  processing 
systems,  some  with  imagin^nd  have  achieved  low  processing  costs.  They 
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Exhibit  V-1fi  5" 
^1 


believe  moving  to  a  new  ^^eck  system  may  inprease  processing  costs 
initially,  i^^ee^paper  checks  .^^^ikely  ta^Saotinue-^e^used  for  some  time 


Barriers  to  Internet  Acceptance  for  Consumer-to-Business 

^  Payments 


Lack  of  security 


Existing  systems 
cost  less 


Lack  of  standards 


Equipment 
funding 


Rating  (1  .Unimportant,  5-Very  Important) 


Source:  INPUT 


2.       Use  ^fjrhe  World  Wide  Web 

Exhibit  V-l/  snows  how  many  companies  plan  to  use  the  WWW  to  purchase 
from  business  catalogs  in  the  next  year. 

The  majority  (58%)  do  not  plan  to  usejs^eb  catalogs.  There  is  an  increase  in 
Web  catalog  use  from  INPUT'S  1995  study  on  ^ectronic  jzfatalogs  and  Malls, 


when  very  few  purchasing  managers  even  used  the  Internet. 
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Percentage  Respc 


No,  Will  Not 
Use  Web 
Catalogs 
58% 


42% 


Source:  INPUT 


"'fl'        3.       How  Wm  Users  Purchase      ^he  Web? 


Exhibit  V-17  shows  the  percentage  ef  respondents  tha^  are  likely  to  uco  o- 

l^lVgak^-afqtrig^T^rfl  tr>  KfTy-fWmn  V>nain»gg  pgfglngfi  nn  thq  WWW-W-tbA-WMtl- 

yeaf. 


7 


"7 


The  majority  of  respondents  (90%)  plan  to  continue  using  purchase  orders  to 
complete  the  transaction.  This  will  change  over  time  as  electronic  payment 
methods  advance.  However,  it  shows  many  businesses  do  not  trust  or  cannot 
use  I^urchasing  dards  to  pay  for  goods  and  services  from  web  catalogs. 
These^rvey  results  indicate  that:  Y 

•  Vendors  do  not  accept  credit  card  payment 

•  The  amounts  are  too  highj-m^**—'^ 

•  Corporate  policielI^|irivent purchasing  f^^ard  use 

Purchasing  Cfard  use  is  expected  to  be  much  higher  in  the  U.S.  than  in 
Europe  because  of  more  widespread  acceptance  of  credit  cards. 
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POs  Preferred      Purchasing  Cards  jfor  Web  Purchases 


Lower 
Costs 

Vim  ing 


100 

Percentage  of  Businesses  Mentioning  ^^4^)^ 

V  V 


4. 


Source:  INPUT 

Will  EDI  System^ffected      ike  Internet? 

Exhibit  V-l^^hows  that  40%  of  respondents  expectii^  their  EDI  systems  to 
change  because  of  the  Internet.  This  is'^ood  for  vendor^hat  supply 
Internet-based  EDI  systen^(I^ePremeno^  W 

All  the  traditional  EDI  service  vendors  are  embracing  the  Internet,  so  they 
should  be  able  to  sell  new  services  to  a  high  proportion  of  their  customers. 

It  will  be  a  challenge  for  them  not  to  lose  customers  to  payment  processors, 
Internet-sawy  banks,  or  Internet  web  hosting  providers  that  offer  merchant 
services.  g 
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Will  EDI  Change  Because  df  T^he  Internet? 


Yes,  EDI  Will 
Change 
40% 


No,  EDI  Will 
Not  Change 
60% 


Source:  INPUT 

y 

5.        Use  0f  Credit  Card  for  WWW  Purchases 

Exhibit  V-ZGtshows  what  businesses  expect  to  buy  with  a  credit  card  using 
the  WWW. 

The  highest  percentage  (88%)  intend  to  buy  software.  This  is  consistent  with 
the  Internet  Shopning  Network^s  view  that  software  is  one  of  the  most 
popular  items  the^el^'om  tlieHf  web  site. 

PC  peripherals  also  appeal  to  technically  savvy  buyers. 

Fewer  ^42%)  would  buy  office  equipment  over  the^eb.  This  may  be  because 
there  is  no  established  web  supplier  yet,  although'many  companies, 
including  OfficeMaxs^re  already  selling  over  the  Internet. 

Only  40%  want  to  buy  information  over  the^l^J^is  is  somewhat  low,  but 
many  businesses  run  on  internal,  rather  than  externally  available 
information. 
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ibit  V-^  [ 


What  Will  Busines^uy  ^rom  ;;^he  WWW  With  ^Credit  Card? 


Software 

PC  Peripherals 

Industrial 
Supplies 

Office  Equipment 
jnformation 
Office  Supplies 


0  20  40  60  80  100 

Percentage  of  Businesses  Mentioning  4%Hi— 


Source:  INPUT 


6.       Use  of  Purchase  Orders  For  WWW  Purchases 

G  / 
Exhibit  V-21  shows  which  products  and  services  are  most  Hkely  to  be 

purchased  using  a  traditional  Purchase  Order  (PO). 


As  mentioned  earher,  equipment  and  industrial  supplies  are  likely  to  be  on 
POs. 


Far  fewer  businesses,  5%,  would  purchase  information  using  a  PO,  compared 
with        that  would  use  a  credit  card. 
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What  Will  Business^uy  F'rom  l^he  WWW^With  ^Purchase 

^      '  Order? 


With  . 

r  0^ 


Electronic 
Components 

Equipment 

Industrial  Supplies 

Laboratory 
Supplies 

Building  Supplies 
Temporary  Help 
Information 


0  20  40  60  80  100 

Percentage  of  Businesses  Mentioning  ((%)-^ 


Source:  INPUT 


Electronic  Checks  and  Orpine  Coins 


1.       Who  Are  E-Checks  Good  For? 

Exhibit  V-2; !  shows  what  business  thinks  Electronic  ^ecks  will  be  used  for. 
The  overwh^ming  majority  (7^%)  think  their  greatest  use  will  be  for 
consumers  to  pay  businesses. 


Businesses  like  paper  checks  and  do  not  see  themselves  converting  to^- 
checks  very  quickly. 

Fe^^^^^^ink  that  consumers  will  use  j^ecks  to  pay  each  other. 
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Who  Are  E-Checks  Good  F<^? 


Business  To 
Anybody 
10% 


Consumer  To 
Consumer 
15% 


Consumer  To 
Business 
75% 


Source:  INPUT 


2.       Competition  For  Electronic  Checks 

Electronic  checks  are  advantageous  mainly  to  the  check  processing 
commumtj^businest^a^much  less  interest  in  them.  Exhibit  V-22  shows  TvV. 
'^^'^K^Diisinesses  thirik  will  compete  with  electronic  checks. 

A 

Most^jf92%Hhink  that  bill  payment  services  like  thejQuicken  Financial 
from  Intuit,  IBM's  Integrio^A^nd  CheckFref^%iot  to  ni^tion 
by  established  EDI  and  payment  processing  vendorsjwill  compete 


Network 
services  by 
with  E-cJiecks. 


These  systems  already  integrate  with  a  company's  accounting  system  and 
even  if  the  check  is  not  entirely  electronic,  because  unsigned  bank  drafts  are 
generated  in  the  process,  the  interface  to  the  user  is  familiar  and  simple. 

The  electronic  check  vendors  need  to  focus  on  making  the  backiend  of  these 
systems  fully  digital. 

Paper  checks  are  still  of  interest  and  32%  of  businesses  think  that 
conventional  paper  checks^hat  are  not  sent  back  to  the  pay^  (i.e^^heir 
processing  is  truncated)  will  be  the  main  competitor.  ^ 
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In  some  businesses,  ATM  and  POS  equipment  will  be  used  as  it  is  now  for 
depositing  checks  and  making  payments,  as  well  as  receiving  money. 


Exhibit  V-2S 


V 


What  Will  Compete  With  Electronic  Checks? 


Bill  Payment 
Services 

Paper  Check 
Truncation 


ATM  POS 


20  40  60  80  100 

Percentage  of  Businesses  Mentioning  ((%)^^-^ 


Source:  INPUT 


3.        Obstacles      Adopting  Electronic  Checks 

The  most  promising^^gii^ntfor.^^ecks  is  for  consumers  to  pay  businesses. 
How|V9r,  even  this  segment  does  not  appear  to  be  very  promisin^s  Exhibit 
V-2<^mdicates. 


I 
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Why  Businesses  Are  Reluctant  To  Support  Electronic  Checks 


Higher  Unit  Costs 


Investment 


Lack  of 
Standards 


Competing 
Scfiemes 


0  20  40  60  80  100 

Percentage  of  Businesses  Mentioning 


Source;  INPUT 


Businesses  believe  that  consumers  are  unlikely  to  usejg^g^cks  to  pay 
businesses.  Most  (9(lr%)  believe  that  costs  will  be  higher  and  72%  see  the 
investment  they  would  have  to  make  as  a  barrier. 

Lack  of  standards  is  an  issue  and  56%  of  businesses  believe  there  are 
competing  schemes  that  will  win  out.  4S©©^xhibitAi-2a^^^^- 

There  is  considerable  uncertainty  about  e::checks  at  this  time. 


4.       Oi^ine  Coin  Outlook 

Exhibit  d^ows  the  percentage  of  businesses  that  expect  to  support 
or^ne  coins  or  ejcash  in  the  next  two  years. 
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E  

Cash  Cards 


1.       Market  Timing 

Exhibit        ^ows  when  businesses  expect  the  use  of  cash  cards  hke  Visa 
Cash  and  Mondex  to  impact  their  organization. 

OnW  6%^nk  they  will  affect  their  operations  in  less  than"|'^rs.  Howevep-s^ 
invito Tyea^tliat  isA^n  the  1998-1999  timeframej;'^  further  22%  think  they^ 
will  have  an  impact.  ^  6 

The  remaining  72%  see  cash  card^s  further  j^J^^'^^'n'^^'^''^^  - 

In  Europe  and  Asia^cash  card  use  is  more  prevalent  than  in  the  U.S.,  where 
nicheljareexpectea  to  accept  the  cards  first.  Some  of  the  early  users  are 
telephone  companies,  restaurant^and  retailers  in  towns  picked  for  a  trial  by 
a  major  vendor.  ^  ^ 
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Exhibit 


V-2^ 


Impact      Cash  Cards 


<2Years 

6% 


2-3  years 
22% 


3-5  Years 
72% 


Source:  INPUT 


2.       Disposable^ersus  Reloadable  Cash  Cards 

Cash  cards  can  either  be  disposable  or  reloadable.  Exhibit  ¥-21^  shows  what 
the  banks  and  businesses  felt  that  the  maximum  amount  should  be  on 
disposable  cash  cards. 

Most  (5^%)  felt  they  should  not  hold  more  than  $25,  but  greater  than  $10.  A  ^ 
iMre  conservative  14%  felt  they  should  hold  no  more  than  $10.  However  SixW^ 
J^^^feltttie  limit  should  go  up  to  $100. 

In  the  Mondex  system,  very  little  is  expected  to  be  carried  on  the  card.u-'i'i^  ^a^aJTU/^ 
^  maybe  enough  for  lunch,  a  newspape^and  a  cappuccino. 

More  electronic  cash  will  be  stored  in  a  wallet  or  PC,  maybe  as  much  as 
$500. 


Much  depends  on  the  card's  use^ja  restaurant  patron  may  want  to  have  more 
on  the  card  than  a  school  child  making  local  phone  calls  worth  25  cents. 
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Exhibit  V-21 


How  Much  Should  V  Cash  Card  Store? 


//V  i\ 


Source:  INPUT  j 

V 

Cash  cards  may  be  refilled  fi-om  a  credit  card  over  the  phone  or  they  may  be 
placed  in  an  ATM  -ma^iirtejthat  is  capable  of  reloading  a  card  fi-om  a  bank 


account.  \, 


Exhibit  V-2$  shows  desirable  features -for  reloadable  cash  cards. 

j  A?— 

The  biggest  feature  is  accountability.  Merchants  want  to  be  able  to  add  up 
their  receipts  quickly  and  if  they  issue  card^rack  how  they  are  being 
requested.  Merchants  want  guarantees  against  bad  debts  and  stolen  cards. 

Simple  memory-based  cards  are  easy  to  counterfeit.  Those  with  processors 
are  harder.  Francer^^^ic^d  fraud  by  70%  when  it  changed  from  simple  cards 
to  those  with  af)processo^^  boar^_ii» 

For  merchants,  of^ine  systems  tend  to  cost  less,  don't  take  time  at  the  POS 
terminaj^and  can  provide  them  with  simpler  network  administration. 
Against  that,  online  systems  caajjrovide  instant  verification  of  funds  and 
may  uncover  fraud  faster  than'Siriine  systems. 

Both  online  and  off-line  systems  are  desirable,  with  a  slight  preference  ifor 
off-line  systems.  Cash  cards  that  are  multipurpose  make  administration 
easier  for  the  user.  Merchants  can  read  them  through  one  POS  terminal. 
Privacy,  to  some  extent  a  feature  of  cash  cards  depending  on  the  exact 
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implementation,  is  seen  as  much  less  desirable  than  other  features  by 
businesses.  A  higher  percentage  of  consumers  would  rate  privacy  highly. 


0  20  40  60  80  100 

Percentage  of  Businesses  Mentioning 4%-)^—-' 


Source:  INPUT 

Exhibit  V-2^^ows  business  pe^^^n^of  obstacles  to  the  adoption  of 
reloadable  cash  cards.  The  big^s|',  particularly  in  the  U.Syv^s  the  prevalence 
of  credit  and  debit  cards.  There  ai-e  also  many  brands  of  cash  cards,  whereas 
the  credit  card  market  ha§^  lew  m£^e^ \^^^-s^ 

With  products  like  Visa  Cash,  even  the  cash  cards  may  be  controlled  by  a  few 
large  players.  Only  2*4%  thought  merchant  acceptance  was  a  barrier  to  using 
reloadable  cash  cards. 


In  general,  based  on  trials,  it  appears  that  merchants  like  handling  cash 
cards  because  they  save  the  time  it  takes  to  give  a  customer  change  and  — ^ 
addit^iip  till  receipts. 
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Exhibit 
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Obstacles  T^o  Adoption      Reloadable  Cash  Cards 
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Source:  INPUT 


Exhibit  V-3(^  shows  merchants'  ranking  of  perceived  benefits  of  using  cash 
cards.  PotentiaMj^;^rchants  beheve  the  time  saved  in  counting  and 
transporting  cash^pJae  the  most  important  benefit. 

Food  handlers  hke  cafes  and  restaurants  beheve  that  using  cash  cards  is 
more  sanitary. 


Some  beheve  that  cash  cards  reduce  the  time  purchasers  spend  at  the  ti 
others  beheve  it  increases  it. 


Reduction  of  fraud  is  another  benefit. 
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Perceived  Benefit  Ranking  of  Cash  Cards 
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Source:  INPUT 


Exhibit  V-3i  shows  a  ranking  of  business  perceptions  of  the  obstacles  to  the 
adoption  of  cash  cards. 

Cost  of  equipment,  in  particular  point-of-sale  systems  and  card  readers,  is 
seen  as  the  greatest  barrier  to  implementation.  For  merchants  to  capitalize 
on  smart  cards,  widespread  acceptance  is  needed  to  amortize  the  cost  of 
equipment  across  many  purchasers. 

Pilot  schemes  that  flood  a  town  with  smart  cards  are  likely  to  be  a  useful 
marketing  strategy  for  any  company  wanting  to  enter  a  market. 

Another  barrier  is  the  changes  that  consumers  will  have  to  make,  which  may 
prove  costly.  Momiex  assumes,  for  example,  that  the  consumer  will  buy  tite^ 
accessories^Eocnebk  the  card  balance  and  lock  and  unlock  it.  Debit  cards  are 
perceived  as  free,  because  they  use  existing  systems. 

Given  the  plethora  of  schemes  for  stored  value  cards,  merchants  are  still 
dubious  about  standards.  Initiall;^A^erchants  may  have  to  absorb  the  u^ront 
cost  of  installing  smart  card  systems  in  anticipation  of  future  cost  savings. 
This  also  presents  an  opportunity  for  banks  and  others  to  lease  systems  and 
equipment  on  favorable  terms. 
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Exhibit  V-31 


Ranking  of  Obstacles  T^o  Adoption  of  Cash  Cards 
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VI 


Issues 


This  chapter  compares  issues  regarding  emerging  pa5Tiaent  systems  for 
payment  system  providers,  merchant^and  payers. 

A  I  

Issues  for  Payment^  System  Providers 

Payment^system^ providers  may  be  network  service  operators,  payment 
processor^or  vendors.  Exhibit  VI- 1  compares  4io$9^merging  payment  [ 
systems 


Exhibit  VI-1  ^  . 

Comparison  of  Payment  System^  Issues  For  Payment  System^  Providers 


Acceptance  Issue 
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Mondex 
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cash  IS^ 

SET  Credit 
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Y 

Y 
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N,  of^e 
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N 

Y 

Security  -  hardware  or 
software 

SW 

HW 

SW 

SW 

HW 

Additional  hardware  needed 
in  network 

N 

Y 

N 

Y 

Y 

Source:  INPUT 

Payment  providers  need  to  understand  the  role  they  undertake  in  providing 
service: 

•  To  what  extent  should  they  become  Internet  service  providers? 

•  What  types  of  services  should  they  provide? 

Another  concern  for  banks  is  how  they  backfup  and  keep  reserves  for  their 
electronic  cash. 


;k|uj 
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When  a  bank  issues  electronic  money  it  comes  out  of  a  checking  account,  for 
which  legal  reserve  requirements  are  in  place.  The  bank  needs  to  be  subject 
to  the  same  reserve  requirements  for  electronic  money  in  circulation  issued 
from  its  accounts. 

Regulations  still  need  to  be  established  for  digital  payment  schemes. 


B 


Issues  for  Merchants 


omparesJ 
issues  raised  earlier  in  the  report. 


Exhibit  VI-2  comparesjiow  emerging  payment  systems  compare,  regarding  I 


Exhibit  VI-2 


Comparison  of  Payment  Systemi^  Issues  For  Merchants 
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Source:  INPUT 

Merchants  have  many  systems  issues: 

•  Should  they  outsource  or  manage  their  own  web  site? 

•  Should  they  rely  on  a  bank  or  service  provider  to  do  their  Internet 
payment  processing?  They  may  already  have  a  relationship  with  a  bank, 
but  an  Internet  service  provider  may  be  offering  service  today  and  the 
bank  may  not  be  ready.  Alsy\a  service  company  like  First  Data  may  offer 
more  attractive  services  than  a  bank. 

•  What  software  and  hardware  do  they  need  to  buy  and  what  can  be  used 
on  a  timesharing  system? 

•  How  should  they  staff  their  technical  support  requirement^ '^th 
technical  expertsr\^r  support  experts  like  clerks  and  retailers.^ 
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Issues  for  Purchasers 


emerging  payment  sy stemsHiompar"  ^^"^ 


Exhibit  VI-3 


Exhibit  VI-3  compares 
purchasers. 


Comparison  of  Payment  System^  Issues 


Acceptance  Issues  for 
Purchasers 

Mondex 

DigiCasfy^E"^ 

j5ashv>-^ 

SET  Credit 
Card 

E-check 

Low  pay^  setup  cost 

Y 

N 

""y 

Y 

N 

Peer-to-peer  transfer  of  value 
possible 

N 

Y 

Y 

N 

Y 

Anonymous 

N 

Y 

Y 

N 

N 

Affiliated  with  financial 
institution 

Y 

Y 

N 

Y 

Y 

Backed  by  government 

N 

N 

N 

N 

N 

Portable 

N 

Y 

N 

N 

Maybe 

Pay  before  (PB),  Pay  now 
(PN),  Pay  later  (PL) 

PB 

PB 

PB 

PL 

PN 

Source:  INPUT 

In  addition  to  the  above  issue^^onsumers  are  interested  in  their  rights  to 
privacy.  They  want  to  know  when  and  where  information  will  be  disclosed. 
They  also  want  protection  against  loss  or  theft. 

/ 

Any  payment  system  issuer  must  be  prepared  to  arrange  for  high  ilevel 
support  to  report  stolen  cards,  reissue  payment  instruments  if  part  of  the 
schern^nd  answer  customer  questions.  ^^^jS^V  i  S 


Legal  and  Regulatory  Issues 


1.       Current  Regulators  and  Regulations 

Ii>  the  U.S.,  Banking  Authorities,  ^axation  Authorities  and^aw 
Enforcement  (Organizations  are  involved  in  the  regulation  of  electronic 
payment  systems.  Exhibit  VI-4  compares  their  concerns. 
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Exhibit  VI-4 


Concerns  of  Regulators 


Banking  Authorities 

Taxation  Authorities 

Law  Enforcement 

•  Citizen  protection,  access, 
disclosure,  risk  of  loss,  issuer 
default,  privacy 

•  Safety  and  soundness  - 
operating  malfunctions, 
settlement  risk,  bank  failures, 
issuer  identity,  seignorage 

•  Aiding  law  enforcement  with 
detection  of  counterfeiting, 
money  laundering,  tax  evasion 

•  [Citizen  protection,  raising  I 
revenue  for  public  goods, 
privacy 

•  Aiding  law  enforcement  with  j 
detection  of  tax  evasion, 
money  laundering  i 

('Citizen  protection,  organized 
crime,  drug  peddling,  terrorism, 
privacy  vs.^rveillance 

Bank  protection,  counterfeiting 

Taxation  system  protection, 
money  laundering,  income  and 
sales  tax  evasion 

Source:  INPUT 

All  of  the  organizations  listed  above  ha^been  dealing  with  regulating 
electronic  networks  for  funds  transfer  lofig"  before  the  Internet  became 
popular. 

In  the  U.S.^gencies  concerned  with  regulation  include  the  Departj^nt  of 
the  Treasury's  FinCEN  (Fin^cial  Crimes ^i^orcement  Network)^^A^ 
(National  Security  Agency)/^!  (es^^.S.  Caribbean  Task  Force)^TLA.,  ICf^. 
Department  of  Justice  (Asset  Forfeiuire  and  Money  Laundering  Section, 
Anti-Drug  Profiteering  Unit),^^feorted  stateTlevel  Gaming  Control  and 
Taxation  departments.  ' 

Internationallj^he  Financial  Action  Task  Force  (FATF),  an  entity  set  up  by 
the  G7,  exists  to  combat  money  laundering. 

It  is  worth  bearing  in  mind,  amid  press  scare^hat: 

•  All  ATMs  have  daily  limiti^ 

•  Most  emerging  electronic  payment  systems  are  accountabl^with  central 
data  repositories  that  provide  inexpensive  access  for  authorities 

•  All  systems,  except  disposable  cards,  require  a  bank  account,  which 
cannot  be  opened  anonymously  in  most  places,  hence  cash  flows  can  be 
monitorec^ 

•  Anonymous  disposable  cardi^ are  not  any  more  portable  than  paper 
currency.  Reloadable  cards  are  not  anonymous  and  they  are  assigned  to 
individual  bank  account^ 

•  If  one  spends  $10,000  of  DigiCash  ECash  then  it  will  be  apparent  to  the 
issuing  banl^s  it  can  only  be  used  once.  The  government  may  not  be 
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able  to  find  where  it  was  sent,  but  it  can  certainly  investigate  in 
traditional  ways. 

•  The  Uf^.  1988  Money  Laundering  Act  requires  all  banks,  financial  firms \ 
and  merchants  to  report  transactions  above  $10,000  and  all  purchases  of 
financial  instruments  above  $3,000. 

•  The  Bank  Secrecy  Act  requires  banking  institutions  to  keep  records  of  all 
transactions  over  $100  for  at  least  five  years  and  «i^t^keep  an  image, 
such  as  a  digital  check  image  or  microfilm  check  picture. 

•  The  U.S.  Financial  Privacy  Act  prevents  banks  from  giving  or  selling 
these  records  to  other  commercial  organizations. 

•  The  potential  for  automated  surveillance  of  the  Internet  could 
significantly  intrude  on  the  privacy  of  users. 

•  The  Mondex  merchant  system  keeps  detailed  transaction  records  wfeiel^ 
would  make  sales  tax  evasion  difficult. 

•  Over  the  next  five  years,  regulations  that  enable  law  enforcement  to 
snoop  on  electronic  transactions  over  the  Internet  are  likely  to  be  defined. 

•  The  Clipper  chip  initiative  met  with  considerable  resistance,  but  the 
government  will  identify  ways  to  monitor  the  Internet  and  users  will 
resist  regulation. 

2.        Regulation  E 

An  excellent  reference  on  the  impact  of  electronic  money  on  the  money 
supply  is  given  in  a  paper  presented  at  the  Conference  on  Digital  Cash  and 
Electronic  Money  organized  by  the  Columbia  "Jnstitute  for  Tele-Information, 
at  the  Columbia  Business  School,  April  21,  1995  by  the  New  York  Federal 
Reserve  at: 

http://startide.ctr.columbia.edu/citi/history/emon.html 

Legislation  is  changing  quickly.  In  May  1996,  modifications  were  made  to 
Regulation  E,  the  Electronic  Funds  Transfer  Act  for  stored  value  cards. 

Stored  value  cards  that  are  subject  to  verification  at  the  time  of  purchase^ 
would  essentially  be  subject  to  the  same  rules  as  credit  cards.  Erroneous 
transactions  would  need  to  be  reported  in  60  days  by  consumers. 

In  addition,  ■ti^f'ederal  authorities  propose  changing  the  definition  of 
"written"  communications  that  are  signed  on  paper  to  include  electronic 
messaging  that  is  "authenticated  similarly"  (i.eJ^^n  practice  "signed  digitally" 
or  signed  with  a  security  code)  by  the  user.  ) 
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The  Federal  Reserve  has  authorized  digital  signing  for  recurrent 
transactions,  such  as  paying  bills.  NACHA,^ay  1996,  extended  the  bill  to 
cover  noi;i«:ecurring  debits  and  credits  using  ACH  networks. 

3.       Digital  Signatures 

California's  AB,  1577  regulation^ecognized  digital  signatures  teen^valid 
signatures  for  electronic  communications,  subject  to  certain  qualifjdng 
criterie 


:i^^^,aftd  wi^paiied  in  October  199^ 


Graduall;j^tates  and  countries  are  sla!t4«i^t6  create  legislation  around 
digital  signatures  and  authenHcation  of  electronic  documents. 

Utah  was  the  first  state  in  the  U.^.  to  set  up  legislfitjon  for  Certificate 
Authorities  and  digital  notaries,  who  can  be  liable  fe^issui^  fraudulent 
certificates.  This  moves  some  of  the  risk  from  banks  and  merchants  to 
certificate  issuers. 


4.  Taxation 

In  November  1996^  the  Clinton  administration  announced  that  it  ha4'no 
plans  to  impose  new  federal  taxes  on  the  Internet.  r 

The  Treasury  has  been  studying  the  implications  on  tax  policy  of  electronic 
commerce.  I^%iscussion  on  this  subject  can  be  found  on  the  Treasury 
Department's  home  page  at  www.ustreas.gov. 

State  and  local  taxation,  not  to  mention  international  taxes  and  rules  for 
exemption  from  taxe»|3ecome  an  issue  for  electronic  funds.  Various  task 
forces,  including  the  Software  Industry  Coalitioj^are  working  on  the^^sues. 
Their  initial  paper  can  be  found  at: 


http://www.softwareIndustrv.org/issues/docs-htm/usetaxwp.html 

Ideally,  states  and  cities  would  create  a  settlement^  proces^j^i&JOj^ftd-  in 
banking  and  telecommunications,  to  solve  check  clearing  and  phone  bill 
payment,  respectively.  Authorities  could  tax  the  sale  of  goods  based  on  the 
ZIP  code  of  the  recipient. 


4hCTe-wiU4MLth^^^^rerri^i^  preva^  mail^der^wnpanies 
charge  accoraing  t^lltaws  or  specific  state^^ywpSle^  often -M^llv^ly  recipie 
in  a  few  states  pay  taxes.  , 


In  fact,  the  law  requires  purchasers  to  pay  use  tax.  Typicall^this  is  only 
collected  on  cars,  boat^and  large  items  by  a  few  states.  ' 
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A  major  international  issue  is  tax  evasioi^and  avoidanoi^  Entire 
communities  have  been  built  offshore  to  support  this  business  and  the  same 
types  of  electronic  communities  can  expect  to  evolve. 

A  noi^olitical  monetary  system  that  became  popular  would  cause  upheavals 
in  the  financial  system.  There  is  no  law  against  offering  a  digital  currency  at 
present.  However,  technically  it  could  not  be  used  to  pay  a  debt. 

5.       Fraud  and  Money  Laundering 

The  most  vulnerable  payment  schemes  are  those  that  allow  anonymity. 

Fear  of  money  laundering  has  made  suppliers  of  payment  systems  provide 
safeguards,  such  as  knowing  the  merchant  or  encrypted  chips  to  foil  money 
launderers.  The  main  risk  is  transferring  digital  cash  oversea^\where  it  may 
be  undetected.  ^ 


Banks  are  increasingly  at  risk  of  harboring  money  launderers.  A  bank  that 
has  a  money  launderer  client  can  be  shut  down  in  the  U.S.  Exceptions  are 
made  when  banks  attempt  to  make  their  systems  legal  and  existing  systems 
are  attacked. 

Electronic  payment?  systems  offer  money  launders  opportunities  to  "cool" 
their  hot  money. 

The  government  is  increasingly  relying  on  banks  to  police -itsk  customers. 

A 

Service  providers  can  increasingly  expect  to  be  held  responsible  for  activities 
that  involve  financial  transactions.  This  may  be  a  deterrent  to  service 
providers  providing  payment  processing  and  an  incentive  for  banks,  like 
First  Union  in  Florida,  to  manage  the  financial  aspects  of  ;^b  commerce. 

Banks  are  going  to  qualify  customers  with  more  questions  about  the  nature 
of  their  transactions,  e.gj^"Do  you  expect  to  make  large  pajTnents?'J^To 
which  overseas  countries  do  you  expect  pajonents  to  be  made?'\rTes"  and 
"Colombia"  being  answers  likely  to  alert  suspicion.  b  M 

Banks  will  be  likely  to  investigate  payments  to  fiscally  tolerant  countries. 

Asset  forfeiture  and  identification  of  trading  partners  with  strong  money 
laundering  legislation  is  a  major  issue  for  regulators  and  global  financial 
institutions. 

Money  laundering  is  largely  accomplished  in  one  of  four  ways: 

f     •    Take  payment  in  cash  or  other  bearer  instruments  and  deposit  in  a 
V-^      bank  in  a  country  that  has  bank  secrecy  laws" — ^^e  biggest  risk  is 
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detection  on  leaving  a  country  like  the  U.S.N^here  travelers  cannot 
carry  more  than  $10,000  in  negotiable  instruments 

Buy  a  legitimate  cash  business  and  run  money  through  it,  like  a  dry 
cleaning  service  or  restaurant^ 

i 

Buy  a^anl^— International  interbank  transfers  are  a  key  problem 
area,inGn^  problem-lieapn  identifying  a  fraudulent  banker,  not  in  the 
networks  per 

Convert  cash  to  goods 

The  problems  above  are  personnel  problems  more  than  technological 
problems.  Corrupt  banks  and  payment  processors  that  use  the  Internet  will 
be  a  likely  problem  for  authorities. 

Another  type  of  fraud  is  duplicating  the  e-mint  or  creating  false  payment 
instruments.  Software,  -aetti^billsf^nd  coins  have  all  been  counterfeited  and 
there  will  be  opportunities'^o  detect  real  from  fake  smart  cards,  digital 
wallets^and  digital  signatures. 

6.       Unlicensed  Oi^ine  Banks  ^ 

Regulators  will  not  tolerate  unlicensed  oi^ne  banks. 

Bfeiks  ax^strbject-toegulation-and-a 

With  digital  cash  and  other  non-national  currencie^here  are  opportunities 
to  set  up  virtual  banks.  These  can  increasingly  be  expected  to  be  closed 
down  by  regulators  if  they  do  not  adhere  to  strict  guidelines. 

Nor^ank  financial  institutions  are  typically  regulated  by  states  in  the  U.S.^;^^ 

There  are  cyberspace  equivalents  starting  to  appear  that  may  fall  Joul  of 
state  legislation.  * 
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Glossary 


This  appendix  provides  definitions  of  terminology  associated  with  the 
Internet  that  is  not  in  INPUT'S  Definition  of  Terms. 


Definitions 


ACH  (Automated  Clearing  House^  organization  that  runs  a  financial 

iTietwork  ahd  clears  electronic  funds  transfers 


V 


Application  protocol  An  application  protocol  is'ajrotocol  that  connects  an 

application  across  a  fietwork,  usually  above  the 
transport  layer  (e.g.,  TCP/IP).  Examples  include 
HTTP,  TELNET,  FTP,  and  SMTP. 

Asymmetric  cipher   An  erlcryption  scheme  where  one  side  has  the  key  and 

-the  other  does  not  as  in  private  key  cryptography 

ATM  [  Automatic  teller  ^achine)is  almost  always  the jigc-eqthe  acronymffn 

this  report?iSometimes4tcan  mean  a  switched 
network  type  as  in  Asynchronous  Transfer  Mode, 
but  that  is  not  the  usual  meaning 

Audit  The  collection  of  information  about  security  events  on  a  network. 

'  Auditing  is  used  for  logging  events,  identifying 
network  attacks,  and  ensuring  that  network 
security  is  working  effectively. 

Authentication    Verificaiion  of  the  claimed  identity  of  a  computer  or 

-  computer  network  user. 

Backbone  A  high-speed  lir(e  or  series  of  connections  that  forms  a  major 

pathway  within  a  network.  The  term  is  relative,  as 
a  backbone  in  a  small  network  may  be  much 
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smaller  than  many  nonibackbone  lines  in  a  large 
^  network. 

1 

Bandwidth     How  much  information  can  be  sent  through  a  connection. 

\jsually  measured  in  bits  per  second.  A  full  page  of 
English  text  in  a  book  totals  around  20,000  bits.  A 
fast  modem  can  move  about  30,000  bits  in  one 
second  (30Kbps),  rising  to  around  120,000  bits  per 
second  (120Kbps)  depending  on  the  type  of 
information  being  transferred  and  the  compression 
used.  Full-motion,  full-screen  video  would  require 
roughly  10,000,000  bits  per  second  (10Mbps), 
depending  on  compression. 

Bit^  inary  digl^- a  single^digit  number  in  base  2;  in  other  words,  either  a 
^  'one  or  a  zero.  The  smallest  unit  of  computerized 
*  data.  Bandwidth  is  usually  measured  in  bits  per 

second. 

Block  cipher  an  encodingjalgorithm  that  operates  on  data  in  groups  of  bits, 
''i  \    called  block^  64  bits  is  a  typical  block  size. 

Browser   A  client  prograjn  (software)  that  is  used  to  look  at  (or  browse) 

jvarious  kinds  of  Internet  resources.  Microsoft 
Explorer  and  Netscape  Navigator  are  two 
examples  of  browsers. 

Bulk  cipher  ^^^Z^^^^^^K  "  ^^"^ 

'A  symmetric  encryption  algorithm  that  encrypts 
^    large  data  streams. 

Byte    A  set  of  bits  that  represents  a  single  character.  Usually  there  are  8  or 

10  bits  in  a  hyte,  depending  on  the  processor 
I  architecture. 

n 

Certificate     part  of  the  ^CITT  X.509  protocol  (a.k.a.  ISO  Authentication 

'  framework)  assigned  by  a  trusted  Certificate 
Authority  that  provides  identification  of  an  entity, 
perso^r  merchant.  It  may  also  supply  its  public 
key.  ^ 


Cyberspace    Currently  i^ed  to  describe  the  whole  range  of  information 

"  resources  available  through  computer  networks 
such  as  the  Internet. 

■^ata  Encryption  Standar^DE^^ 

a  very  widely  used  symmetric  encryption 
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algorithm.  DES  is  a  block  cipher. 


Digital  Signature  Standard  (DSS) 

standard  for  digital  signing,  including  the 
Digital  Signing  Algorithm,  approved  by  the 
National  Institute  of  Standards  and  Technology, 
defined  in  NIST  FIPS  PUB  186,  "Digital  Signature 
Standard,"  pubhshed  May,  1994  by  the  U.S.  Dept. 
of  Commerce. 


Digital  signatures 


Digital  signattrf^^se  cryptography  to  produce  a 
data  string  that  can  be  authenticatedfand  jsj^  2/ve_ 
difficult  to  forge  or  repudiate. 


DNS  (Domain  Name  Serve^ 

198.93.130.56)  are  converted  into  character-based 


a  means  by  which  numeric  IP  addresses  (e.g., 


Domain  Name 


Nan 


names  (e.g.,  www.input.com)  and  vice  versa. 

4  > 

The  unique  name  that  identifies  an  Internet  site.  Domain 


names  always  have  2  or  more  parts,  separated  by 
dots — for  example,  'input.com.'  The  part  on  the  left 
is  the^mo^specific,  and  the  part  on  the  right  is 
the-sfloi^ general.  A  given  machine  may  have  more 
than  one  domain  nam^ut  a  given  domain  name 
points  to  only  one  machine. 


e^sn  electronic  cash,  proposed  by  DigiCash  and  CyberCasl^ 
checKg,  proposed  by  FSTQ^r^ 


^-checks  electronic 
E-mail^lectronic  mai 


■7' 


'm^sages,  usually  textual,  sent  fi*om  one  person  to 
another  via  computer.  E-mail  can  also  be  sent 
automatically  to  a  large  number  of  addresses  via  a 
mailing  list. 


e-money   electronic  mone^r  such  as  digital  cash,  ACH  transactions,  e:^eck^_, 

EDI    Electronic  Data  Interchang^^aditional  business-to-business 

*  protocols  aiid  formats  for  exchanging  ordering 

information  electronically 

EFT    Electronic  Funds  Transfer 

Electronic  cash    egcrypt^  data  that  represents  cash  and  can  be  sent  over 
^         networks  to  pay  for  goods  and  service^^ 
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Encryption    A  method  o^  protecting  data  so  that  if  it  is  accessed,  it  cannot 

.  be  understood  without  the  use  of  a  secret 
encryption  key. 


Ethernev^A  network  stanc^ard  for  connecting  computers  in  a  LAN.  Ethernet 

^will  handle  about  10Mbps  and  can  be  used  with 
almost  any  kind  of  computer.  Fast  Ethernet 
handles  100Mbps,  in  practice  speeds  are  lower 
than  the  rated  capacity  of  the  network. 

FAQ  (Frequently  Asked  Question^  -  FAQs  are  documents  that  list  and 

answer  the  most  common  questions  on  a 
particular  subject.  There  are  thousands  of  FAQs 
on  subjects  as  diverse  as  pet  grooming  and 
crj^jtography.  FAQs  are  usually  written  by  people 
who  have  tired  of  answering  the  same  question 
many  times.  FAQs  are  often  associated  with 
Usenet  newsgroups. 

Fast  Ethernet     The  latest  Ethernet  standard  that  specifies  a  data  transfer 

rate  of  100Mbps,  a  tenfold  increase  over 
traditional  Ethernet  performance. 

FDDI  ^iber  Distributed  Data  Interfac^r  standard  for  transmitting  data 
7"  on  optical  fiber  Cables  at  a  rate  of  approximately 

I  ^  100Mbps. 

FEDI  (Financial  EDlA^e  payment  protocols  and  standards  that  follow  an 

^  EDI  message  to  order  goods  in  business-to- 
business  electronic  commerc^^ 

FTP    /File  Transfer  Protocol  4-  ^ery  common  method  of  moving  files 

between  two  Internet  sites.  FTP  is  a  special  way  to 
log  in  to  another  Internet  site  for  the  purpose  of 
retrieving  and/or  sending  files. 

Host   Any  computer  on  a^etwork  that  is  a  repository  for  services  available 

'  to  other  computers  on  the  network.  It  is  quite 
common  to  have  one  host  machine  provide  several 
0;ir^  services,  such  as  Web  and  Usenet. 

HTML^yperText  Markup  Language) -^  tjbe  coding  language  used  create 

:  hypertext  documents  for  use  on  the  World  Wide 


Web. 


HTTP  ^yperText  Transport  Protoc^-^  the  protocol  for  moving  hypertext 

files  across       Internet.  Requires  an  HTTP  client 
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program  at  one  en(^nd  an  HTTP  server  program 
at  the  other.  HTTP  is  the  most  important  protocol 
^  ^  used  in  the  World  Wide  Web  today. 

7 

Hypertext  Generally,  any  text  that  contains  "links"  to  other  documents  - 

"  words  or  phrases  in  the  document  that  can  be 

I      chosen  by  a  reader  and  which  cause  another   

\      document  to  be  retrieved  and  displayed. 

Internet    The  vast  collection  of  interconnected  networks  that  all  use  the 

TCP/IP  protocol  and  that  evolved  from  the 
ARPANET  of  the  late  1960s  and  early  1970s. 

IP ^ddress     A  unique  mimber  consisting  of  4  numbers  separated  by  dots. 
/  '  Every  machine  that  is  on  the  Internet  has  a 

unique  IP  address  -  if  a  machine  does  not  have  an 
IP  address,  it  is  not  really  on  the  Internet.  Most 
machines  also  have  one  or  more  domain  names 
that  are  easier  for  people  to  remember.  For 
example,  the  IP  address  of  www.input.com  is^t 
the  time  of  writing,  198.93. 130 

IRC    i  Internet  Relay  Ch£i^-^'%lar^^^^j^ser  live  chat  facility.  There  are 

a  number  of  major  IRC  servers  around  the  world 
that  are  linked  to  each  other.  Anyone  can  create  a 
channel  and  everything  that  any  member  of  a 
channel  types  in  is  seen  by  all  users  in  that 
channel.  Private  channels  can  be  created  for 
invitation-only  conference  calls. 

ISDN  [Integrated  Services  Digital  Networl^  -  a  64Kbps  digital  telephone  line 
^  connection.  ISDN  acceptance  is  still  low  due  to 

high  equipment  prices,  but  as  prices  falJ^ 
individuals  and  companies  are  benefiting  from 
leased-line  performance  on  a  dial-up  line.  Connect- 
time  charges  are  normally  the  same  as  for  a 
regular  analog  telephone  connection. 

ISP    j  Internet  Service  Provide^  -  an  organization  (usually  commercial)  that 
V-  offers  individuals  and  other  organizations  access 

to  the  Internet  through  a  dial-up  connection, 
ISDN,  or  leased  line. 


JEPI  Joint  Electronic  Payment  Initiative 
l^lobi^l,024  bits.  Abbcei^kitfifci^^ 
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j^Globyt^  1,024  byte^ 


LAN  i~Local-Area  Networlc 9,  computer  network  limited  to  the  immediate 
V  I  "area,  usually  the  same  building  or  floor  of  a 

f    company  building. 

Leased  line    A  phone  line  that  is  permanently  held  open  for  data  transfer 

Ioetween  two  locations.  The  highest  speed  data 
connections  require  a  leased  line. 

Listserv    The  most  common  kind  of  mail  list,  Listservs  originated  on 

BITNET,  but  they  are  now  common  on  the 
Internet. 


Login  The  account  namei^sed  to  gain  access  to  a  computer  system  or 

I  network. 

Mail  list   An  automated  s^^stem  that  allows  people  to  send  E-mail  to  one 

address,  whereupon  their  message  is  copied  and 
sent  to  all  of  the  other  subscribers  to  the  mail  list. 
In  this  way,  people  who  have  many  different  kinds 
of  E-mail  access  can  participate  in  discussions 
together. 


^bbreviatedid(Mb.; 


t^'^egabi^f  1,024  kilobits 
sfsfMegabyt^  1,024  kilobytes^^bbreviated-^(MK; 


4/  Message  Authentication  Code^fMAC)^ 
«  A  Message  Authentication  Code  is  a  one-way  hash 

computed  from  a  message  and  some  secret  data. 
Its  purpose  is  to  detect  if  the  message  has  been 
altered. 

MICR  magnetically  enco^d  information  at  the  bottom  of  a  checl^ 

Micropayment     usuall^mall  paymen^  r  in  reality\it  means  a  payment  that 
1^         can  be  made  with  a  smart  card  or  digital  cash. 

Nanopayments  and  picopayments  are  even  smaller 
payments. 


MOTO applies  to  retailers  that  sell  using  man  order,  telephone  order-  ^ 

 ^<^«\t>P' 


MRO  Maintenance,  Repair,  Office  expense^  7  ^^pically^small  expenses  that 
r  corporations  are  lik^  to  pu{  on  purchasing  card^^ 
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NACHA  (National  Automated  Clearing  House  Associatio^  industry  group 

that  sets  standards  for  ACH^ 

Node  Any  single  comput^  connected  to  a  network. 


One-way  hash  function 


^  A  one-way  transformation  that  converts  an 


arbitrary  amount  of  data  into  a  fixed-length  hash. 
It  is  computationally  hard  to  reverse  the 
\y         transformation  or  to  find  collisions. 

'J  -I 

Packet  SwitchingThe  metl;iod  used  to  move  data  around  on  the  Internet.  In 
i  I  .  jacket  switching,  the  data  coming  out  of  a 

'     machine  is  broken  up  into  chunks,  each  chunk 
containing  the  addres^^ whei^it  came  from  and 
where  it  is  going.  This  enables  chunks  of  data  from 
many  different  sources  to  coexist  on  the  same 
lines,  and  be  sorted  and  directed  to  different 
destinations  by  special  machines  along  the  way. 
This  way,  many  people  can  use  the  same  lines  at 
the  same  time. 

-7 

Password  A  code  used  to  ^ain  access  to  a  locked  system.  Good  passwords 

contain  letters  and  nofiTetters  and  are  not  simple 
combinations. 


PIN  (^Personal  Identification  Number)  ^sed  like  a  password  to  make 

transactions  more  secure^.  ^ 

POS  |Point  of  sale  syster^  -  typically  a  cash  register  or  computer  acting  as  a 

PPP  f  Point-to^'oint  ProtocoJ/-^  most  welUtnown  as  a  protocol  that  allows  a 
^  ^  computer  to  use^  regular  telephone  line  and  a 

modem  to  make  a  TCP/IP  connection  and  thus  be 
on  the  Internet.  PPP  is  gradually  replacing  SLIP 
for  this  purpose. 

Proxy ^erver  (Proxy)  Ana^plication  that  controls  traffic  between  a  protected 

network  and  the  Internet. 


Public  key  cryptography 

'  a  class  of  cryptographic  techniques  emplo3ring 
two-key  ciphers.  Messages  encrypted  with  the 
public  key  can  only  be  decrypted  with  the 
associated  private  key.  Conversely,  messages 
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signed  with  the  private  key  can  be  verified  with 
J^X    the  pubhc  key. 

Purchasing  cards  Corporate  credit/debit  cards,  typically  used  to  make 

smaller  purchase^^^ 

RC2,  RC4  ;^^W^^N=-^X* 

V  Proprietary  bulk  ciphers  from  RSA  Data  Security, 


Inc.  . 


RFC  (Request  For  Comment^    t;he  name  of  the  result  and  the  process  for 
l'  creating  a  standard  on  the  Internet.  New^y 

standards  are  proposed  and  published  onrline,  as 
an  RFC.  The  Internet  Engineering  Task  Force  is  a 
consensus-building  body  that  facilitates  discussion 
q  ^  and  establishes  new  standards. 

f  -  '1 

Router  A  software  packagejbr  special-purpose  computer  that  handles  the 

connection  between  two  or  more  networks.  Routers 

spend  all  their  time  looking  at  the  destination 

addresses  on  the  packets  passing  through  them 

and  deciding  which  route  to  send  them  on. 

SET    Standard  for  creditjcard  transaction  handling  over  the  Interne^^ 

leased-line  connectioii  capable  of  carrying  data  at  1.544Mbps.  At 

^maximum  theoretical  capacity,  a  Tl  line  could 
move  a  megabyte  in  less  than  10  seconds.  That  is 
still  not  fast  enough  for  full-screen,  full-motiogj^^ , 
video,  for  which  yf>H-Bffea  at  least  lOMbp^.  Tl  is 
one  of  the  fastest  speeds  commonly  used  to  connect 
networks  to  the  Internet. 

leased-line  connection  capable  of  carrying  data  at  44.736Mbps.  This  is 
more  than  enough  to  transmit  full-screen,  full- 
motion  video. 

TCP/IP   rTransmission  Control  Protocol/Internet  Protocop-r  jl  collection  of 

communication  protocols  that  define  the  Internet 
and  allow  different  computers  to  communicate 
V  with  one  another  over  a  common  network. 

Telnet  The  command  and  |)rogram  used  to  log  in  from  one  Internet  site  to 

^  'knother.  The  telnet  command/program  gets  you  to 
the  "login:"  prompt  of  another  host. 
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Further  References  ^  ^  |vj|>M^  U   O S  r     VU<>ir>  ^ 

A  comprehensive  bibliography  of  electronic  payment  systems  is  maintained 
at  Stanford  University,  with  URI^^  _^ 
http://robotics.stanford.edu/users/ketchpel/ecash.html. 
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Vendor  and  Association  Names 
and  Addresses 


Exhibit  B-1  lists  the  names  and  addresses  of  some  leading  vendors  of 
Internet  payment  and  web  technology. 


Exhibit  B-1 

Names  and  Addresses  of  Vendors 


Company 

Product 

Amdahl  Corporation 
1250  East  Arques  Avenue 
Sunnyvale,  CA  94088 
U.S.A. 

Tel-  1  800  538  8460 
PM'-  408  773  0833 

www.amdahl.com 

Broadvision,  Inc. 

333  Distal  Circle 

Los  Altos,  CA  94022-1404 

U.S.A. 

TeJ:/415  943  3600 
FAX:  415  943  3699 

www.broadvision.com 

G^o'mpaq  Connputer  Corporation 
P.  p.  Box  692000 
Houston,  TX  77269-2000 
U.S.A. 

Tel:, 71 3  370  0670 
F^(:  713  514  1740 

www.compaq.com 

Connect,  Inc. 
515  Ellis  Street 

Mountain  View,  CA  94043-2242 
U.S.A. 

Tel:  1  800  262  2638 

www.connectinc.com 
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ICVERIFY,  Inc. 
473  Roland  Way 
Oakland,  CA  94621 
U.S.A. 

Tel:  510  553  7500 
Fax:  510  553  7553 

www.icverify.com 

Intuit,  Inc. 

2535  Garcia  Avenue 
Mountain  View,  CA  94043 
U.S.A. 

Tel:  415  944  6000 
Fax:  415  944  6688 

www.intuit.com 

Mastet;gard  International,  Inc. 
2000  F^hase  Street 
Purchase,  NY  10577-2509 
U.S.A.  0/  / 
Tel:  914f249f2000 

www.mastercard.com 

Microsoft  Corporation 
One  Microsoft  Way 
Redmond,  WA  98052-6399 
U.S.A. 

Tel:  206  882  8080 
Fax:  206  936f7329 

Internet  Explorer,  Internet  Information  Server 

Mondex  International 
47-53  Cannon  Street 
London 
EC4M  5SQ 
England 

Tel:  +44(0)  171  557  500 
Fax:  +44(0)  171  557  520 

www.mondex.com 

O'Reilly  &  Associates 
103A  Morris  Street 
Sebastopol,  CA  95472 
U.S.A. 

Tel:  +1  707  829  0515 
Fax:  +1  707  829  0104 

URL:  http://www.ora.com/or 
WebSite 

http://website.ora.com 

Netscape  Communications 
501  East  Middlefield  Road 
Mountain  View,  CA  94043 
U.S.A. 

Tel:  +1  415  254  1900 
Fax:  +1  415  528  4124 

URL:  http://www.netscape.com/ 

Oracle  Corporation 
500  Oracle  Parkway 
Redwood  Shores,  CA  94065 
U.S.A. 

Tel:  415  506  7000 
Fax:  415  506  7200 

www.oracle.com 
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Premenos  Technology  Corporation 
1000  Burnett  Avenue,  2"^*  Floor 
Concord,  CA  94520 
U.S.A.  u  Y 
Tel:  510:602,^000 

www.premenos.com 

Silicon  Graphics,  Ino- 
201 1  North  Shorelinrfelvd. 
Mountain  View,  CA  94043 
U.S.A. 

Tel:  415  960  1980 
FAX:  415  961  0595 

www.sgi.com 

Sony  Corporation 
3300  Zanker  Road 
San  Jose,  CA  95134 
U.S.A.   .  t/ 
Tel:  408?432t1600(^ 
Tel:  201,^30t(000y|N 

www.sony.com 

Sun  Microsystems,  1)^6?' 
2550  Garcia  Avenue 
Mountain  View,  CA  94043-1100 
U.S.A. 

Tel:  1  800  USA  4SUN 

www.sun.com 

Unisys  Corporation 
P.       Box  500 
BlueBell,  PA  19424-0001 
U.S.A.  <y 
Tel:  215  986t5777 
FAX:  215  986  6850 

www.unisys.com 

VerlFone,  Inc. 
Three  Lagoon  Drive 
Redwood  City,  CA  94065-1561 
U.S.A. 

Tel:  415  591  6500 
FAX:  415  598  5504 

www.verifone.com 

Visa  International 
P.  ^Box  8999 
SanFrancisco,  CA  94128-8999 
U.S.A. 

Tel:  415  432  3200 

www.visa.com 
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Internet  Standards  Committees  and  Associations 


World  Wide  Web  Consortium  (W3C) 

An  organization  to  develop  common  standards  for 
the  evolution  of  the  Web,  coordinated  by  MIT  in  the 
U.S.  and  INRIA  in  France. 

Internet  Engineering  Task  Force  (IETF) 

A  consensus-building  body  that  facilitates  discussion 
and  establishes  new  standards. 

Internet  Society 

An  international  organization  that  aims  to  further 
cooperation  and  coordination  for  Internet  technology 
and  applications. 

Source: 
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ELECTRONIC  PAYMENT  METHODOLOGIES 


To  Our  Clients: 

This  summary  is  an  excerpt  from  a  full  research  report,  Electronic  Payment 
Methodologies,  issued  as  part  of  INPUT'S  Electronic  Commerce  Program.  A-eompleti^ 
description  of  the  program  is  provided  at  the  end  of  this  Executive  Overview. 

If    you    have    questions    or    comments    about    this    report,    please  call 
(415)  961-3300  to  contact  your  INPUT  analyst. 
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Abstract 


This  report^nalyzeslmarket  trends  for  electronic  payment  methods.  It 
provides  insights  into)  how  payment  processes  will  change  as  a  result  of  the 
Internet|a^^art"of  iNPUTs  Electronic  Commerce  Progran),|^Representatives 
of  50  corporate  users,  10  payment  processing  services,  8  bankers  and  3 
financial  regulators  were  interviewed  to  capture  data  and  commentary  about 
the  potential  opportunities  available  in  this  market. 

Electronic  Payment  Methodologies  identifies  the  payment  methodologies  ate- 
that  are  most  likely  to  beAenftAwidely  adopted.  It  also  discusses  trends, 
issue^nd  future  technology  directions. 

The  report  contains  424  pages  and  53  exhibits. 
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Several  credit  card  and  micropayment  schemes  are  being  proposed  for  the 
Internet.  The  current  preferred  payment  method  for  Internet  trajisactions  is 
to  use  a  credit  card.  Visa,  Master^rd,  American  Express/VefiFone,  [  ck^cJz. 

Microsoft  and  others  are  working  on  SET  standards  for  credit  card 
processing  over  the  Internet  and  these  are  hkely  to  be  widely  accepted. 

Mondex,  initiated  by  National  Westminster  Bank  in  the        is  gaining 
global  acceptance  by  banks  and  is  a  strong  contender  for  a  micropayment 
cash  card  schemei,jboth(^i|  storefront  and  network  transactions.  CyberCash, 
currently  with  a  proprietaiy  scheme,  will  follow  SET  standards  and  is  likely 
to  be  a  major  technology  supplier  and  payment  systems  vendor.  Smaller 
companies  like  DigiCash  may  have  to  find  niche  markets,  lest  they  be 
overtaken  by  Mondex  and  credit  card  vendors'  cash  card  schemes.  Visa  and 
Mastercard  will  not  allow  the  electronic  cash  systems  vendors  to  encroach  on 
their  markets  and  will  also  be  major  players.  .^--^^'^^^^J^^^^j^ue^ 

Digital  signature  schemes  are  starting  to  be^acceptedr  Signatures  stored  in 
"bett^wallets  and  on  computersf  (slowly  gathering  momentuni;  will  become 
common  at  the  beginning  of  the  next  century.  There  will  be  tremendous 
opportunities  for  manufacturers  of  P.OS  (point-of-sale)  and  payment 
processing  systems  to  upgrad^|me]fci?an^f^b'^nks^     payment  service 
companies.  Security  will  become  tighter  as  systems  evolve  and  excellent 
opportunities  in  supporting,  building^and  testing  security  systems  will 
develop.  k 


Key  Trends  and  Issues 
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Exhibit  1  lists  key  trends  and  issues  regarding  electronic  payments.  ^^1^^ 
Security  challenges  will  increase  as  fraud  and  hacker  activity  grow;"  Digital 


signatures  and  encryption  schemes  will  make  Internet  payment  schemes"^^,.— ^ 
safer  than  traditional  checks  that  can  be  stolen,  counterfeitec^or  signed  wuh 
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forged  signatures.  Money  laundering  may  be  a  longlerm  issue. 


A 


Trends,  Issues^and  Opportunities 


'/            ■  ■ 

www  OpportiP||^^^^^^^||||||H 

Security 

•  SET  acceptance  for  credit  card  Internet 
transactions 

•  Digital  signatures  will  be  gradually 
accepted  -  Certificate  Authorities  will  be 
a  new  type  of  organization 

•  Fraud  will  increase,  although  many 
Internet  schemes  are  safer  than  current 
payment  schemes 

•  Payment  processors  and  banks  can  offer 
Internet  services 

•  Services  and  products  based  around 
security 

•  Digital  signature  verification  and 
authentication  services 

•  Fraud  detection  systems 

Smart  Cards 

•  Cost  of  merchant  equipment 

•  Consumer  acceptance 

•  Competition  from  debit  cards, 
particularly  in  the  U.S. 

•  Card  introduction  in  a  new  area  -  how  to 
run  pilot  systems 

•  For  business«to-business  trade,  POs 
apd  checks  aVe  still  preferred,  although 
Purchasing  0ards  are  increasingly  used 

(  I 

•  POS  system  upgrades 

•  Global  vendor  systems  to  support 
worldwide  purchasing  -  purchase  here, 
deliver  there 

•  Internet  credit  card  processing  turnkey 
systems 

•  Smart  card  "on  the  street"  and  "on  the  net" 
systems  ^ 

^Srriart  cards  are  likely  to  be  used  for  small  ^ 
^mounts 

Robust 
Messaging 

•  l\/lore  intelligent  messages  that  include 
digital  signatures 

•  More  reliable  message  routing 

•  Multimedia  messaging 

•  Services  that  rely  on  signed  documents 

•  Directory  and  routing  services 

•  Higher  speed  private  networks 

•  New  businesses  that  sell  small  items  and 
accept  digital  cash  will  become  popular 

Internet  Shopping 

•  Will  Internet  malls  succeed^and  who  will 
run  them  -  banks,  Internet  service 
providers,  telecommunications 
companie^r  financial  payment 
processors? 

•  What  payment  methods  will  be 
preferred-  a  global  digital  currency  could 
impact  national  economies 

•  Payment  reporting  and  data  aggregation 
will  differentiate  merchant  services 

•  Merchant  services  to  support  Internet 
shopping 

•  Interfacing  existing  credit  and  debit  card 
processing  systems  to  the  Internet 

•  Check  truncation  systems,  particularly 
scanning  devices  to  capture  check 
information 

2 


©  1936  bj?  INPUT.  Reproduction  Prohibited. 


ELECIBQNl)CPAyM£NT  METHODOLOGIES. 

1 


Exhibi^^  (Continued) 


Outsourcing  data 
management 


Trends,  Issues  and  Opportunities  (Cont.) 


issuesj 

mm 


I 


New  level  of  detail  possible  with  Internet  \ 
payments 

Merchant  services  will  increasingly  be 
outsourced 


Opportunities 


Customer  analysis  and  reporting  software 

Long^erm  outsourcing  contracts 

New  applications  that  can  be  outsourced, 
for  example  transaction  payment  services 
using  products  like  Open  Market's  OM- 
Transact 
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Which  Payment  Systems  Will  Win? 
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Outlook 

Credit  cards  clearly  have  an  early  lead  for  payment  over  the  Internet,  but  for 
smaller  transactions  or  anonymous  purchases  they  are  unsuitable. 


Businesses  continue  to  prefei 
the  use  of  Purchasing  Cards 


Businesses  continue  to  prefer  checks  to  any  other  form  of  payment,  although 

is  growing. 


The  Internet  will  fuel  further  growth  of  I^urchasing  (^ards.  Debit  cards  will 
increasingly  be  popular,  but  may  have  limited  use  overseas. 

Cash  cards  are  more  widely  used  in  Europe  and  Japan  than  in  the  U.S.. 
Vendors  like  Mondex  that  can  combine  Internet  payment  methods  with  those 

:1Kll 


for  storefronts  are  at  an  advantage  over 
Internet  or  storefronts. 


hat  support  either  the 


Both  checks  and  cash  will  see  declining  use  over  the  next  10  years.  However, 
neither  is  in  danger  of  disappearing.  Singapore,  for  example,  aims  for  a 
cashless  society,  but  for  most  countries  this  will  be  impractical. 

Exhibit  Ir  lists  the  traditional  payment  systems  reviewed  in  this  report  and 
summarizes  their  outlook. 
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Exhibit^2' 

Outlook  for  Traditional  Payment  Systems 


Cash 

•  Will  decline  in  use,  particularly  smaMenomination  coins 

•  Debit  and  credit  cards  will  be  the  main  alternatives 

•  If  cash  declines  significantly,  central  banks  will  be  at  risk  of  losing  interest  and 
therefore  will  want  to  be  involved  in  issuing  digital  currencies  long  term  -  this 
will  counteract  technology  providers'  tendency  to  develop  global  currencies 

Checks 

•  Check  truncation  with  image  scanning  at  point  of  capture  will  take  advantage  of 
existing  systems  ^ 

•  Paper  checks  will  always  be  illed  for  some  transactions,  but  a  decline  in  their 
use  can  be  expected  towards  the  end  of  the  20'^  century 

EFT  or  ACH  Transfers 

•    CheckFree,  the  Quicken  Financial  Networt^nd  other  services  that  enable 
consumers  and  businesses  to  pay  checks  electronically  will  compete  with 
Internet  payment  schemes 

ATM  Machines 

•  More  global  connections  via  Cirrus,  Plus,  Linl^and  other  networks 

•  Mainly  used  by  consumers,  more  intelligent  ATMs  that  provide  other  services, 
like  smart  card  replenishment,  are  being  designed 

,  1,2-1 

•  May  be  adapted  to  supply  other  good? <^airline  tickets,  stamps 

Credit,  Debit  and  Cash 
Cards 

•  Mondex  is  a  promising  smart  card  scheme  for  both  storefront  and  Internet 
purchases  j 

•  Visa  Cash  and  similar  credit|card  company  schemes  will  -b^likely-teTbe 
successful 

Trade  Credit 

•    Will  continue,  because  practices  to  support  it  are  widely  implemented 

Source:  INPUT-- 

Exhibit  2  lists  the  major  emerging  pajonent  systems  reviewed  in  this  report 
and  summarizes  their  outlook. 
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Exhibit 


CyberCash  Cards  and  Coin 


Outlook  for  Emerging  Payment  Systems 


CyberCash  will  move  to  SET  standards  as  they  evolve  and  is  likely  to  be  a 
major  payment  systems  vendor<' 

Its  coin  scheme  is  subject  to  considerable  competition  and  its  future  is  less 
clear. 


DigiCash  ECash 


ECash  is  likely  to  be  a  niche  product  that  is  used  by  small  businesses  that 
cannot  obtain  credit  card  processing,  although  over  time  they  are  expected  to 
have  agreements  with  service  bureaus  and  banks  to  undertake  their  payment 
processing 

It  lacks  the  support  of  big  business  to  be  a  serious  threat  to  national  currencies^ 


After  a  somewhat  shaky  start,  the  pilot  was  demonstrated  in  Sept/^^e.  A  full  ^ 
pilot  trial  is  expected  by  early  1997.  c,^ 

Skepticism  surrounds  E-_^eck  because  it  automates  the  paper  process  and 
seems  cumbersome  to  <5i«dit  card  processors  who  have  overcome  many  of  the 
problems  that  the  FSTC  is  trying  to  solve. 

This  is  likely  to  merge  with  other  schemes  for  digital  payment  as  they  are 
adopted  and  clear  winners  emerge. 


FSTC  E-Check 


First  Virtual 


First  Virtual  has  an  innovative  system  that  enables  merchants  to  accept  credit 
card  payment  even  when  they  may  not  qualify  to  accept  credit  card  payments. 

This  system  supports  largely  small  businesses. 

First  Virtual  keeps  its  credit  card  numbers  off  the  net  for  security,  but  this 
makes  the  processing  more  labor  intensive  than  some  of  the  other  schemes. 

As  standards  emerge,  First  Virtual  may  need  to  become  a  payment  processor 
for  other  scheme^^y^as  it  is  unlikely  that  its  processes  will  survive  in  the  face  of 
competition  from  Mondex,  Vis^nd  others.  


Mondex  and  Visa  Cash 
Cards 


Mondex  is  a  promising  smart  card  scheme,  initiated  by  National  Westminster 
Bank  in  the  l-y<^for  both  storefront  and  Internet  purchases.  Mondex  has  global  "/ 
partners  and  a  strong  awareness  of  the  entire  payment  processing 
environment,  including  government  regulations,  that  a  smaller  vendor  cannot 
match. 


Widespread  vendor  support  and^opularity  of  credit  card  payment  for  Internet 
transactions  make  this  a  promising  approach.  For  all  except  the  smallest  items 
it  is  likely  to  be  the  primary  means  of  purchasing  goods  on  the  Internet. 


SET  Credit  Card 
Processing 


SSL  Netscape 


This  is  a  simple  standard  for  securing  a  web  server,  not  a  complete  payment 
methodology. 

It  has  been  a  quick  fix  for  web  merchants,  but  is  likely  to  be  integrated  into 
more  sophisticated  systems  that  use  SET. 


Source:  INPUT 
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Five^ear  Outlook  ^  , 

^  \/ 

1996j/-Year  of  Internet  Prototype  Commerce ^^^^^^ 

SSL-enabled  ^ommerce  Web  Servers  for  simple  credit  card  encryption 

CyberCash  and  SET  implementations  start  to  be  available 

Web  use  is  mainly  for  promotion,  with  some  order  taking 

1/ 

1997  k  Commerce  Pilots  Move  To  Sienificant  Systems 


/''' 

Web  ordering  takes  off,  many  more  commerce-enabled  web  servers 

Digital  signatures  start  to  be  used  and  become  a  status  symbol 

Wide  availability  of  SET  systems,  software  and  services 

Internet  wallet  standard  emerges 

New  regulations  for^-check  and  stored  value  cards 

E-^eck  and  check  truncation  FSTC  projects  continue 

Micropayment  cards  see  success  in  new  market  niches 

Network  computers  for  the  Internet  provide  more  low^ost  access, 
widening  the  potential  market  for  goods  sold  over  the  Internet 

Explosion  of  Web  Catalogs,  especially  for  industrial  products 

Digital  certificates  foster  exchange  of  bills,  invoices/j^Os  over  the 
Internet  ^  ' 

Internet  backbone  gets  upgraded  to  layered  network  offering  different 
classes  of  service  for  different  service  fees,  IPv6  increasing  number  of 
addressable  nodes 


1998 IB-  Year  of  The  Smart  Card 


•  Micropayment  schemes  shake  out,  difficult  times  for  vendors  like 
CyberCash  and  DigiCash  if  they  fail  to  adopt  standards 

•  Visa,  Mastercard,  Europay  rollout  Microprocessor  card  "wallets" 

•  Signed_e-Qhecks  complement  the  exchange  of  POs  over  the  Internet,  but 
acceptafidfe  rate  is  slow,  given  competition  from  Visa  and  others 

•  Internet  bill  presentment  deployed 

I  ©  1996  by  rNPUT.  Reproduction  Prohibited. 
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fllr  2000 LI  [-  Market  Maturity  Beeins^ 

•  Banks  provide  Internet  business  services 

•  Business  accounting  software  incorporates  modules  for  pajdng  and  billing 
over  the  Internet 

•  Value  of  goods  and  services  traded  over  the  Internet  reaches  $165p  in 
2000  and  $60d^"in2001  i 

Payment  IMethodology  Positioning 

Exhibit  ^positions  payment  processing  methods  regarding  acceptance  and 
Trade  credit  is  the  established  method  for  business-to-business 


i 


ise  order  (PO),  barterin^r  letterrofrcredit^^v^^ 
t  countries  of  the  world,  klthoughjfeie  LLST^ 


major  users 

transactions,  whether  via  purchai 
Credit  cards  are  accepted  in  most 
hasanere-extcn3iv|^^e-x>f-fehem^  Until  recently^when  purchasing  0ards  were 
issue^'^^^ere  primarily  used  by  consumers  and  for  gravel  and 
]^nter{ainment  (T&E)  in  business.  Increasingly  they  will  be  used  by 
businesses  for  purchasing  small  items  and  for  v^eh  transactions.  The  SET 
Internet  payment  scheme  endorsed  by  Visa,  Master^^ard,  Microsoft,  VeriFone 
and  others  will  be  globally  endorsed  as  it  rolls  out  in  products  and  services , 
,  starting  this  y«f\v^  — 


Payment  Processing  Method  Positioning 


Global  Acceptance 

I 


National  Acceptance 


Niche  Acceptance 


Emerging 


Trade  Credit 


Credit  Cards 


Check 


SSL  Netscape 
For  Web  Servers 


EFT 


Cash 


i 


ATM  Machines 


Debit  Cards 


Cash  Cards  -  Mondex,  Visa 


SET  Internet  Credit  Card 


CyberCash  Coin 


FSTC  E-Check 


First  Virtual 


DigiCash  ECash 


Mainly  Business 


Both  Business  and  Consumer 


Mainly  Consumer 
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Conclusions 


•  Digital  currencies  are  still  in  their  infancy  and  no  clear  digital  cash 
winner  has  yet  emerged. 

•  Credit  cards  and  the  SET  standards  offer  promise  as  an  Internet 
payment  method  that  is  likely  to  succeed  rapidly. 


•  Fast  processing  gives  a  methodology  a  competitive  advantage,  but  bear  in 
mind  that  merchants  may  want  some  time  to  pay  bills.  One  way  to 
address  this  is  to  waive  transaction  charges  for  certain  classes  of 
electronic  transactions  to  encourage  faster  payment,  just  as  POs  offer 
advantageous  terms  for  early  payment. 

•  Excellent  customer  relationships  will  increasingly  differentiate  payment 
processors  and  service  providers. 

•  Network4»g^nd  Internet  technology  is  sometimes  hard  to  implement 
reliably.  Systems  must  be  set  up  that  make  it  easy  for  customers  to  link 
to  other  systems. 

•  Use  of  widely  accepted  standards,  such  as  SET,  are  essentials  for  any 
transaction  processor. 

•  Transaction  processing  can  be  differentiated  by  bundling  marketing  data 
with  an  aggregate  transaction  report.  Service  providers  need  to 
understand  how  they  can  expand  data  capture  and  data  aggregation 
processes  to  offer  added  value. 


t 


E 


Recommendations 


^ ,   Recommendations  for  Merchants 


•    Watch  emerging  smart  card  standards  carefuUyf  don't  go  it  alone^  ensure 
that  other  merchants  in  your  market  or  region  are  using  the  same 
technology. 


•    Invest  in  multiVpurpose  equipment. 
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•  Offer  your  goods  and  services  on  the  web. 

•  Consider  using  a  service  provider,  banl^or  payment  processor  to  handle 
Internet  web  commerce  functions.  ' 

t 

Recommendations  for  Non-storefront  Businesses 

•  Evaluate  where  {Purchasing  ^ards  can  best  be  used. 

>  _i 

•  Consider  using  the  Internet  for  purchasing,  if  this^  not  alread^used^ 

•  Offer  employees  guidelines  for  paying  for  goods  and  services  purchased 
from  web  servers. 

•  Consider  the  level  of  data  aggregation  and  marketing  information 
required  when  choosing  new  payment  schemes. 

Recommendations  for  Banks  ^ 

•  Consider  offering  a  pilot  |^mart  Card  project  in  an  entire  town  to 
establish  merchant  relationships. 

•  Offer  web  merchant  services  and  support,  either  directly  or  via  third 
parties,  to  merchants  with  whfch  you  have  credit  card  or  banking 
relationships.  tXjr^fTs 

•  Explore  check  processing  and  consider  how  back-end  systems  can  be 
made  to  handle  Internet  payment  systems^^  retrofitting  old  systems  may 
not  be  the  easiest  migratioi^it  may  be  easier  to  consider  alternative 
processes.  ^ 

•  Team  up  with  recognized  Certificate  Authorities  and  promote  the  use  of 
digital  signatures  for  other  businesses,  such  as  loans. 

•  Offer  services  that  help  merchants  and  businesses  pay  consumers 
electronically. 

Recommendations  for  Payment  Product  and  Services  Vendors 

•  Offer  Internet  services  to  existing  customers,  or  risk  losing  their  entire 
payment  processing  business  to  a  competitor  who  can  provide  Internet 
services. 


•    Consider  how  financial  check  paying  networks  will  interface  with 
Internet  payment  systems. 
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